CloudWatch · Evidence-led investigation
mermaid-prod-rds-cpu
At a glance
Severity: MediumMonitor
Prod RDS (db.t3.medium) CPU stayed above 90% from about 20:40Z to 22:30Z on Oct 17, during high API traffic and back-to-back summary-cache rebuilds. The alarm returned to OK at 22:34Z, and the root cause is suspected, not proven.
Prod API responses were slower during heavy database load; no errors were recorded.
Diagnosis
Prod RDS (db.t3.medium) CPU stayed above 90% from about 20:40Z to 22:30Z on Oct 17, during high API traffic and back-to-back summary-cache rebuilds. The alarm returned to OK at 22:34Z, and the root cause is suspected, not proven.
Suspected: a lot more database work on a small db.t3.medium instance. Two things overlapped with the CPU rise: 1) the SummaryCache worker (process_summaries) ran update_summary_cache over and over from about 20:33Z, with each run taking about 32-35s and new runs starting roughly every 1-2 minutes; 2) prod API requests went up about 4x, from 181 to 759 per 15 minutes. The available evidence does not show which queries used the CPU or which projects were being rebuilt.
Timeline
- 2026-10-15 ~16:10Z: Earlier spike to 94.8% CPU, then back to OK (E001 old state).
- 2026-10-17 20:20-20:30Z: RDS CPU at about 5-6% (E003).
- 2026-10-17 ~20:33Z: SummaryCache worker starts repeated 'RUNNING CACHE UPDATE' cycles of about 32-35s each (E019).
- 2026-10-17 20:35-20:40Z: CPU climbs from 25% to 52% and then 83% (E003).
- 2026-10-17 20:50:30Z: Alarm goes to ALARM after 2 datapoints over 80% (83.5, 85.8) (E001, E006).
- 2026-10-17 20:50-21:15Z: CPU at 89-94%. Prod API requests rise from 181 to 759 per 15 min and p95 latency goes from 0.74s to 1.33s, with no 5xx datapoints recorded (E018).
- 2026-10-17 22:34:30Z: Alarm back to OK (73.4% after a 95.8% datapoint) (E002).
Alternative explanations
- Heavy queries driven by user traffic (API requests rose about 4x) might be the main source of load, with the summary cache work being a side effect of edits or submissions.
- One large project, or the same project being queued over and over, might have made the summary cache rebuild run many times in a row.
- Other scheduled or ad-hoc database work not captured here, such as admin or analytics queries.
Unknowns and missing evidence
- Which queries used the CPU: Performance Insights is enabled but its data was not collected.
- Which project IDs were rebuilt and how many items were queued in SummaryCacheQueue.
- CPU and latency after about 21:15Z: the metric queries only returned data inside the incident window, so current health relies on the alarm's OK state (E002).
- Whether the deployed code matches repository HEAD (E004).
Recommended actions
- Pull Performance Insights top SQL for 2026-10-17 20:30-22:35Z to see whether summary cache queries or API queries used the CPU.
- Check SummaryCacheQueue volume and the project IDs processed in that window, and add project IDs to the process_summaries logs.
- Since this is the second over-threshold spike in 3 days (Oct 15 and Oct 17), decide whether to resize from db.t3.medium or limit summary cache concurrency (ThreadPoolExecutor max_workers=cpu_count).
- Keep watching the alarm, CPUCreditBalance, and API p95 latency for repeat spikes.
Fixes and validation
No draft PRs created.
Context and provenance
{
"repositories": {
"data-mermaid/mermaid-api": {
"name": "data-mermaid/mermaid-api",
"branch": "master",
"sha": "a23d9e97f6bc083866d8290fb68dc7e2727074fd",
"path": "/home/dustin/projects/mermaid/alarm-monitor/data/repos/data-mermaid/mermaid-api/a23d9e97f6bc083866d8290fb68dc7e2727074fd",
"checked_at": 1792348623.1334283
},
"data-mermaid/mermaid-webapp": {
"name": "data-mermaid/mermaid-webapp",
"branch": "develop",
"sha": "28f4b7f3c35c78fc8dbfc0543547efd8eb75988e",
"path": "/home/dustin/projects/mermaid/alarm-monitor/data/repos/data-mermaid/mermaid-webapp/28f4b7f3c35c78fc8dbfc0543547efd8eb75988e",
"checked_at": 1792348625.2455728
},
"data-mermaid/mermaid-dash-v2": {
"name": "data-mermaid/mermaid-dash-v2",
"branch": "develop",
"sha": "7f025ca484f2166ef5f125812975b6b87c958574",
"path": "/home/dustin/projects/mermaid/alarm-monitor/data/repos/data-mermaid/mermaid-dash-v2/7f025ca484f2166ef5f125812975b6b87c958574",
"checked_at": 1792348626.434717
}
},
"documents": [
"data-mermaid/mermaid-api",
"data-mermaid/mermaid-webapp",
"data-mermaid/mermaid-dash-v2"
],
"errors": []
}Evidence
E001 · alarm_event
{
"id": "E001",
"source": "alarm_event",
"collected_at": "2026-10-18T18:40:04.231155+00:00",
"error": false,
"arguments": {},
"result": {
"AlarmName": "mermaid-prod-rds-cpu",
"AlarmType": "MetricAlarm",
"Timestamp": "2026-10-17T13:50:30.692000-07:00",
"HistoryItemType": "StateUpdate",
"HistorySummary": "Alarm updated from OK to ALARM",
"HistoryData": "{\"version\": \"1.0\", \"oldState\": {\"stateValue\": \"OK\", \"stateReason\": \"Threshold Crossed: 1 datapoint [64.61894159846395 (15/10/26 16:15:00)] was not greater than the threshold (80.0).\", \"stateReasonData\": {\"version\": \"1.0\", \"queryDate\": \"2026-10-15T16:21:33.662+0000\", \"startDate\": \"2026-10-15T16:10:00.000+0000\", \"statistic\": \"Average\", \"period\": 300, \"recentDatapoints\": [94.80285706463924, 64.61894159846395], \"threshold\": 80.0, \"evaluatedDatapoints\": [{\"timestamp\": \"2026-10-15T16:15:00.000+0000\", \"sampleCount\": 5.0, \"value\": 64.61894159846395}]}}, \"newState\": {\"stateValue\": \"ALARM\", \"stateReason\": \"Threshold Crossed: 2 datapoints [85.84184626220294 (17/10/26 20:44:00), 83.52414220015623 (17/10/26 20:39:00)] were greater than the threshold (80.0).\", \"stateReasonData\": {\"version\": \"1.0\", \"queryDate\": \"2026-10-17T20:50:30.677+0000\", \"startDate\": \"2026-10-17T20:39:00.000+0000\", \"statistic\": \"Average\", \"period\": 300, \"recentDatapoints\": [83.52414220015623, 85.84184626220294], \"threshold\": 80.0, \"evaluatedDatapoints\": [{\"timestamp\": \"2026-10-17T20:44:00.000+0000\", \"sampleCount\": 5.0, \"value\": 85.84184626220294}, {\"timestamp\": \"2026-10-17T20:39:00.000+0000\", \"sampleCount\": 5.0, \"value\": 83.52414220015623}]}}}"
}
}E002 · aws
{
"id": "E002",
"source": "aws",
"collected_at": "2026-10-18T18:40:04.501886+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "describe_alarms",
"parameters": {
"AlarmNames": [
"mermaid-prod-rds-cpu"
],
"AlarmTypes": [
"MetricAlarm"
]
}
},
"result": {
"CompositeAlarms": [],
"MetricAlarms": [
{
"AlarmName": "mermaid-prod-rds-cpu",
"AlarmArn": "arn:aws:cloudwatch:us-east-1:554812291621:alarm:mermaid-prod-rds-cpu",
"AlarmDescription": "RDS CPU utilization exceeded 80% for 10 minutes",
"AlarmConfigurationUpdatedTimestamp": "2026-06-16 13:36:03.274000-07:00",
"ActionsEnabled": true,
"OKActions": [
"arn:aws:sns:us-east-1:554812291621:mermaid-prod-alerts"
],
"AlarmActions": [
"arn:aws:sns:us-east-1:554812291621:mermaid-prod-alerts"
],
"InsufficientDataActions": [],
"StateValue": "OK",
"StateReason": "Threshold Crossed: 1 datapoint [73.44756050963548 (17/10/26 22:28:00)] was not greater than the threshold (80.0).",
"StateReasonData": "{\"version\": \"1.0\", \"queryDate\": \"2026-10-17T22:34:30.676+0000\", \"startDate\": \"2026-10-17T22:23:00.000+0000\", \"statistic\": \"Average\", \"period\": 300, \"recentDatapoints\": [95.81352928763691, 73.44756050963548], \"threshold\": 80.0, \"evaluatedDatapoints\": [{\"timestamp\": \"2026-10-17T22:28:00.000+0000\", \"sampleCount\": 5.0, \"value\": 73.44756050963548}]}",
"StateUpdatedTimestamp": "2026-10-17 15:34:30.677000-07:00",
"MetricName": "CPUUtilization",
"Namespace": "AWS/RDS",
"Statistic": "Average",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
],
"Period": 300,
"EvaluationPeriods": 2,
"Threshold": 80.0,
"ComparisonOperator": "GreaterThanThreshold",
"TreatMissingData": "notBreaching",
"StateTransitionedTimestamp": "2026-10-17 15:34:30.677000-07:00"
}
],
"LogAlarms": []
}
}E003 · aws
{
"id": "E003",
"source": "aws",
"collected_at": "2026-10-18T18:40:04.763954+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "get_metric_data",
"parameters": {
"MetricDataQueries": [
{
"Id": "alarm_metric",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "CPUUtilization",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 300,
"Stat": "Average"
}
}
]
}
},
"result": {
"MetricDataResults": [
{
"Id": "alarm_metric",
"Label": "CPUUtilization",
"Timestamps": [
"2026-10-17 14:15:00-07:00",
"2026-10-17 14:10:00-07:00",
"2026-10-17 14:05:00-07:00",
"2026-10-17 14:00:00-07:00",
"2026-10-17 13:55:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:45:00-07:00",
"2026-10-17 13:40:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:30:00-07:00",
"2026-10-17 13:25:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
93.70451809157748,
91.61984743335397,
89.9709273356535,
89.04105291158494,
91.5509993006071,
90.4064784554605,
85.8052908423903,
83.27377710907999,
52.18546286665696,
25.44342881357223,
5.971550149427671,
5.723776753388079
],
"StatusCode": "Complete"
}
],
"Messages": []
}
}E004 · repository_snapshots
{
"id": "E004",
"source": "repository_snapshots",
"collected_at": "2026-10-18T18:40:04.764102+00:00",
"error": false,
"arguments": {},
"result": {
"data-mermaid/mermaid-api": {
"sha": "a23d9e97f6bc083866d8290fb68dc7e2727074fd",
"branch": "master",
"checked_at": 1792348623.1334283
},
"data-mermaid/mermaid-webapp": {
"sha": "28f4b7f3c35c78fc8dbfc0543547efd8eb75988e",
"branch": "develop",
"checked_at": 1792348625.2455728
},
"data-mermaid/mermaid-dash-v2": {
"sha": "7f025ca484f2166ef5f125812975b6b87c958574",
"branch": "develop",
"checked_at": 1792348626.434717
}
}
}E005 · aws
{
"id": "E005",
"source": "aws",
"collected_at": "2026-10-18T18:40:25.252351+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "get_metric_data",
"parameters": {
"StartTime": "2026-10-17T18:00:00Z",
"EndTime": "2026-10-18T18:30:00Z",
"MetricDataQueries": [
{
"Id": "cpu",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "CPUUtilization",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 900,
"Stat": "Average"
}
},
{
"Id": "conns",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "DatabaseConnections",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 900,
"Stat": "Maximum"
}
},
{
"Id": "readiops",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "ReadIOPS",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 900,
"Stat": "Average"
}
},
{
"Id": "credit",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "CPUCreditBalance",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 900,
"Stat": "Minimum"
}
}
]
}
},
"result": {
"MetricDataResults": [
{
"Id": "cpu",
"Label": "CPUUtilization",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
91.765097620195,
90.33284355588418,
73.75484360604241,
12.379585238795993
],
"StatusCode": "Complete"
},
{
"Id": "conns",
"Label": "DatabaseConnections",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
25.0,
23.0,
21.0,
17.0
],
"StatusCode": "Complete"
},
{
"Id": "readiops",
"Label": "ReadIOPS",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
0.5956876176307786,
34.41906977086897,
0.7824474075224193,
0.6153162608536424
],
"StatusCode": "Complete"
},
{
"Id": "credit",
"Label": "CPUCreditBalance",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
521.5313332833333,
542.4285448333334,
562.8273089666667,
576.0
],
"StatusCode": "Complete"
}
],
"Messages": []
}
}E006 · aws
{
"id": "E006",
"source": "aws",
"collected_at": "2026-10-18T18:40:25.510765+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "describe_alarm_history",
"parameters": {
"AlarmName": "mermaid-prod-rds-cpu",
"HistoryItemType": "StateUpdate",
"MaxRecords": 30
}
},
"result": {
"AlarmHistoryItems": [
{
"AlarmName": "mermaid-prod-rds-cpu",
"AlarmType": "MetricAlarm",
"Timestamp": "2026-10-17 13:50:30.692000-07:00",
"HistoryItemType": "StateUpdate",
"HistorySummary": "Alarm updated from OK to ALARM",
"HistoryData": "{\"version\": \"1.0\", \"oldState\": {\"stateValue\": \"OK\", \"stateReason\": \"Threshold Crossed: 1 datapoint [64.61894159846395 (15/10/26 16:15:00)] was not greater than the threshold (80.0).\", \"stateReasonData\": {\"version\": \"1.0\", \"queryDate\": \"2026-10-15T16:21:33.662+0000\", \"startDate\": \"2026-10-15T16:10:00.000+0000\", \"statistic\": \"Average\", \"period\": 300, \"recentDatapoints\": [94.80285706463924, 64.61894159846395], \"threshold\": 80.0, \"evaluatedDatapoints\": [{\"timestamp\": \"2026-10-15T16:15:00.000+0000\", \"sampleCount\": 5.0, \"value\": 64.61894159846395}]}}, \"newState\": {\"stateValue\": \"ALARM\", \"stateReason\": \"Threshold Crossed: 2 datapoints [85.84184626220294 (17/10/26 20:44:00), 83.52414220015623 (17/10/26 20:39:00)] were greater than the threshold (80.0).\", \"stateReasonData\": {\"version\": \"1.0\", \"queryDate\": \"2026-10-17T20:50:30.677+0000\", \"startDate\": \"2026-10-17T20:39:00.000+0000\", \"statistic\": \"Average\", \"period\": 300, \"recentDatapoints\": [83.52414220015623, 85.84184626220294], \"threshold\": 80.0, \"evaluatedDatapoints\": [{\"timestamp\": \"2026-10-17T20:44:00.000+0000\", \"sampleCount\": 5.0, \"value\": 85.84184626220294}, {\"timestamp\": \"2026-10-17T20:39:00.000+0000\", \"sampleCount\": 5.0, \"value\": 83.52414220015623}]}}}"
}
]
}
}E007 · aws
{
"id": "E007",
"source": "aws",
"collected_at": "2026-10-18T18:40:25.905388+00:00",
"error": false,
"arguments": {
"service": "rds",
"operation": "describe_db_instances",
"parameters": {
"DBInstanceIdentifier": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
},
"result": {
"DBInstances": [
{
"DBInstanceIdentifier": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako",
"DBInstanceClass": "db.t3.medium",
"Engine": "postgres",
"DBInstanceStatus": "available",
"MasterUsername": "mermaid_admin",
"Endpoint": {
"Address": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako.cus0vfcwxkgi.us-east-1.rds.amazonaws.com",
"Port": 5432,
"HostedZoneId": "Z2R2ITUGPM61AM"
},
"AllocatedStorage": 100,
"InstanceCreateTime": "2022-10-19 23:28:23.102000+00:00",
"PreferredBackupWindow": "05:55-06:25",
"BackupRetentionPeriod": 7,
"DBSecurityGroups": [],
"VpcSecurityGroups": [
{
"VpcSecurityGroupId": "sg-064eb238849672247",
"Status": "active"
}
],
"DBParameterGroups": [
{
"DBParameterGroupName": "mermaid-api-infra-common-postgresrdsv2parametergroup34f1dc72-y5tplueh6sdd",
"ParameterApplyStatus": "in-sync"
}
],
"AvailabilityZone": "us-east-1b",
"DBSubnetGroup": {
"DBSubnetGroupName": "mermaid-api-infra-common-postgresrdsv2subnetgroupbf527e09-t4jlnrht69y1",
"DBSubnetGroupDescription": "Subnet group for PostgresRdsV2 database",
"VpcId": "vpc-0b8d0b133cf698181",
"SubnetGroupStatus": "Complete",
"Subnets": [
{
"SubnetIdentifier": "subnet-0f6ee421ff74f0528",
"SubnetAvailabilityZone": {
"Name": "us-east-1b"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-01695453a8ccf3b90",
"SubnetAvailabilityZone": {
"Name": "us-east-1a"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
},
{
"SubnetIdentifier": "subnet-0de7c41fdf3ffbe7a",
"SubnetAvailabilityZone": {
"Name": "us-east-1c"
},
"SubnetOutpost": {},
"SubnetStatus": "Active"
}
]
},
"PreferredMaintenanceWindow": "thu:09:05-thu:09:35",
"UpgradeRolloutOrder": "second",
"PendingModifiedValues": {},
"LatestRestorableTime": "2026-10-18 18:35:39+00:00",
"MultiAZ": false,
"EngineVersion": "16.13",
"AutoMinorVersionUpgrade": true,
"ReadReplicaDBInstanceIdentifiers": [],
"LicenseModel": "postgresql-license",
"Iops": 3000,
"StorageThroughput": 125,
"OptionGroupMemberships": [
{
"OptionGroupName": "default:postgres-16",
"Status": "in-sync"
}
],
"PubliclyAccessible": false,
"StorageType": "gp3",
"DbInstancePort": 0,
"StorageEncrypted": false,
"DbiResourceId": "db-I5WNPPCVE2ZJRSEX2ELAFCB62U",
"CACertificateIdentifier": "rds-ca-rsa2048-g1",
"DomainMemberships": [],
"CopyTagsToSnapshot": true,
"MonitoringInterval": 0,
"DBInstanceArn": "arn:aws:rds:us-east-1:554812291621:db:mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako",
"IAMDatabaseAuthenticationEnabled": true,
"DatabaseInsightsMode": "standard",
"PerformanceInsightsEnabled": true,
"PerformanceInsightsKMSKeyId": "arn:aws:kms:us-east-1:554812291621:key/5d0a623b-74e2-4a83-87a4-8dda20f3c5be",
"PerformanceInsightsRetentionPeriod": 7,
"DeletionProtection": true,
"AssociatedRoles": [],
"TagList": [
{
"Key": "aws:cloudformation:stack-name",
"Value": "mermaid-api-infra-common"
},
{
"Key": "aws:cloudformation:logical-id",
"Value": "PostgresRdsV2B4B63A33"
},
{
"Key": "Owner",
"Value": "sysadmin@datamermaid.org"
},
{
"Key": "aws:cloudformation:stack-id",
"Value": "arn:aws:cloudformation:us-east-1:554812291621:stack/mermaid-api-infra-common/9aa83210-fbd6-11ec-8442-0e619f7b5c81"
}
],
"CustomerOwnedIpEnabled": false,
"NetworkType": "IPV4",
"ActivityStreamStatus": "stopped",
"BackupTarget": "region",
"CertificateDetails": {
"CAIdentifier": "rds-ca-rsa2048-g1",
"ValidTill": "2027-10-01 09:05:04+00:00"
},
"DedicatedLogVolume": false,
"IsStorageConfigUpgradeAvailable": false,
"EngineLifecycleSupport": "open-source-rds-extended-support"
}
]
}
}E008 · aws
{
"id": "E008",
"source": "aws",
"collected_at": "2026-10-18T18:40:26.164705+00:00",
"error": false,
"arguments": {
"service": "rds",
"operation": "describe_events",
"parameters": {
"SourceIdentifier": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako",
"SourceType": "db-instance",
"Duration": 10080
}
},
"result": {
"Events": []
}
}E009 · aws
{
"id": "E009",
"source": "aws",
"collected_at": "2026-10-18T18:40:26.519183+00:00",
"error": false,
"arguments": {
"service": "logs",
"operation": "describe_log_groups",
"parameters": {
"limit": 50
}
},
"result": {
"logGroups": [
{
"logGroupName": "/aws/chatbot/mermaid-dev-alerts",
"creationTime": 1780584695644,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/chatbot/mermaid-dev-alerts:*",
"storedBytes": 1586,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/chatbot/mermaid-dev-alerts",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/chatbot/mermaid-prod-alerts",
"creationTime": 1781961503675,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/chatbot/mermaid-prod-alerts:*",
"storedBytes": 1081,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/chatbot/mermaid-prod-alerts",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/ecs/containerinsights/mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS/performance",
"creationTime": 1709232272303,
"retentionInDays": 1,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS/performance:*",
"storedBytes": 19245905,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS/performance",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/ecs/containerinsights/mermaid-api-infra-common-MermaidApiClusterB0854EC6-xitj9XbqTwap/performance",
"creationTime": 1657153059290,
"retentionInDays": 7,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-MermaidApiClusterB0854EC6-xitj9XbqTwap/performance:*",
"storedBytes": 0,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-MermaidApiClusterB0854EC6-xitj9XbqTwap/performance",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/fsx/lustre",
"creationTime": 1765209118436,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/fsx/lustre:*",
"storedBytes": 613,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/fsx/lustre",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/guardduty/malware-scan-events",
"creationTime": 1762451414445,
"retentionInDays": 90,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/guardduty/malware-scan-events:*",
"storedBytes": 0,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/guardduty/malware-scan-events",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/GithubAccess-CustomAWSCDKOpenIdConnectProviderCust-nPaXd2yAHuaM",
"creationTime": 1741207114563,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/GithubAccess-CustomAWSCDKOpenIdConnectProviderCust-nPaXd2yAHuaM:*",
"storedBytes": 7416,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/GithubAccess-CustomAWSCDKOpenIdConnectProviderCust-nPaXd2yAHuaM",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/Webapp-CustomCDKBucketDeployment8693BB64968944B69A-cmjXmoqExRqc",
"creationTime": 1666823496519,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/Webapp-CustomCDKBucketDeployment8693BB64968944B69A-cmjXmoqExRqc:*",
"storedBytes": 21492,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/Webapp-CustomCDKBucketDeployment8693BB64968944B69A-cmjXmoqExRqc",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/Webapp-CustomS3AutoDeleteObjectsCustomResourceProv-5SwgQJiDT7VI",
"creationTime": 1666823245819,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/Webapp-CustomS3AutoDeleteObjectsCustomResourceProv-5SwgQJiDT7VI:*",
"storedBytes": 2008,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/Webapp-CustomS3AutoDeleteObjectsCustomResourceProv-5SwgQJiDT7VI",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/Webapp-StaticSiteSiteCertificateCertificateRequest-HZIXU4xQmxZj",
"creationTime": 1666823265230,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/Webapp-StaticSiteSiteCertificateCertificateRequest-HZIXU4xQmxZj:*",
"storedBytes": 2128,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/Webapp-StaticSiteSiteCertificateCertificateRequest-HZIXU4xQmxZj",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/coldstart-spike",
"creationTime": 1781574250757,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/coldstart-spike:*",
"storedBytes": 92812,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/coldstart-spike",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-2NSBAJf7vE1W",
"creationTime": 1715294882791,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-2NSBAJf7vE1W:*",
"storedBytes": 7834,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-2NSBAJf7vE1W",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-VZh1xbdNlYH6",
"creationTime": 1717181510839,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-VZh1xbdNlYH6:*",
"storedBytes": 742648,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-VZh1xbdNlYH6",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-dZR6tMk1lnJG",
"creationTime": 1715210960794,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-dZR6tMk1lnJG:*",
"storedBytes": 4794,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-dZR6tMk1lnJG",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-gdWJE4UwQmN4",
"creationTime": 1715208841266,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-gdWJE4UwQmN4:*",
"storedBytes": 4791,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-gdWJE4UwQmN4",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-n93D4v2D1H2w",
"creationTime": 1715210311587,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-n93D4v2D1H2w:*",
"storedBytes": 3476,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomCDKBucketDeployment8693BB6496-n93D4v2D1H2w",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-4W6gnSS9kNHe",
"creationTime": 1715210797736,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-4W6gnSS9kNHe:*",
"storedBytes": 2395,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-4W6gnSS9kNHe",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-8ODua8luesMx",
"creationTime": 1715208660008,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-8ODua8luesMx:*",
"storedBytes": 2113,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-8ODua8luesMx",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-lQ4zPGAbAxH7",
"creationTime": 1715294693914,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-lQ4zPGAbAxH7:*",
"storedBytes": 4492,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-lQ4zPGAbAxH7",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-m4Sde495d9co",
"creationTime": 1715210133492,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-m4Sde495d9co:*",
"storedBytes": 1975,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-m4Sde495d9co",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-nKv4AqPpuVO0",
"creationTime": 1717181199200,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-nKv4AqPpuVO0:*",
"storedBytes": 1140,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-dashboard3-CustomS3AutoDeleteObjectsCustomReso-nKv4AqPpuVO0",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-explore-CustomCDKBucketDeployment8693BB6496894-doURzD7bRCu5",
"creationTime": 1744662742640,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-explore-CustomCDKBucketDeployment8693BB6496894-doURzD7bRCu5:*",
"storedBytes": 144594,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-explore-CustomCDKBucketDeployment8693BB6496894-doURzD7bRCu5",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-explore-CustomCDKBucketDeployment8693BB6496894-qHFwZglfOxqv",
"creationTime": 1747939129775,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-explore-CustomCDKBucketDeployment8693BB6496894-qHFwZglfOxqv:*",
"storedBytes": 154276,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-explore-CustomCDKBucketDeployment8693BB6496894-qHFwZglfOxqv",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-explore-CustomS3AutoDeleteObjectsCustomResourc-fPo8e8TbSDLP",
"creationTime": 1744662406754,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-explore-CustomS3AutoDeleteObjectsCustomResourc-fPo8e8TbSDLP:*",
"storedBytes": 5144,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-explore-CustomS3AutoDeleteObjectsCustomResourc-fPo8e8TbSDLP",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-api-django-GeneralLambdaWorkerWorkerFu-qW5uYKCG9INg",
"creationTime": 1738180909444,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-api-django-GeneralLambdaWorkerWorkerFu-qW5uYKCG9INg:*",
"storedBytes": 184438,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-api-django-GeneralLambdaWorkerWorkerFu-qW5uYKCG9INg",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-inference-pyspacer",
"creationTime": 1783367153869,
"retentionInDays": 30,
"metricFilterCount": 2,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-inference-pyspacer:*",
"storedBytes": 106170,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-inference-pyspacer",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-9A0t2q9nqbRi",
"creationTime": 1747096326170,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-9A0t2q9nqbRi:*",
"storedBytes": 4514,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-9A0t2q9nqbRi",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-CpObQg27Y8kv",
"creationTime": 1747092776091,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-CpObQg27Y8kv:*",
"storedBytes": 3969,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-CpObQg27Y8kv",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-E5F4X0ak0Z7o",
"creationTime": 1747441252944,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-E5F4X0ak0Z7o:*",
"storedBytes": 5614,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-E5F4X0ak0Z7o",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-KGkAYNDFcMuO",
"creationTime": 1747094499962,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-KGkAYNDFcMuO:*",
"storedBytes": 4048,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-KGkAYNDFcMuO",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-bf33MmldWlNv",
"creationTime": 1747411416848,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-bf33MmldWlNv:*",
"storedBytes": 4516,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-bf33MmldWlNv",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-xqQ5Ad7XVLjF",
"creationTime": 1747090164554,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-xqQ5Ad7XVLjF:*",
"storedBytes": 4053,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-sagemaker-CustomS3AutoDeleteObjectsCus-xqQ5Ad7XVLjF",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-webapp-CustomCDKBucketDeployment8693BB64968944-CUsBxYrfWiy1",
"creationTime": 1667230280529,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-CustomCDKBucketDeployment8693BB64968944-CUsBxYrfWiy1:*",
"storedBytes": 2934525,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-CustomCDKBucketDeployment8693BB64968944-CUsBxYrfWiy1",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-webapp-CustomCDKBucketDeployment8693BB64968944-nx4lp2AljTIj",
"creationTime": 1752009305558,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-CustomCDKBucketDeployment8693BB64968944-nx4lp2AljTIj:*",
"storedBytes": 1614461,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-CustomCDKBucketDeployment8693BB64968944-nx4lp2AljTIj",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-webapp-CustomS3AutoDeleteObjectsCustomResource-zQzqDXLvFdQ0",
"creationTime": 1667229975682,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-CustomS3AutoDeleteObjectsCustomResource-zQzqDXLvFdQ0:*",
"storedBytes": 832,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-CustomS3AutoDeleteObjectsCustomResource-zQzqDXLvFdQ0",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/dev-webapp-StaticSiteCertificateCertificateRequest-GE3uidk8CtW3",
"creationTime": 1667229992584,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-StaticSiteCertificateCertificateRequest-GE3uidk8CtW3:*",
"storedBytes": 2135,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-webapp-StaticSiteCertificateCertificateRequest-GE3uidk8CtW3",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/mermaid-api-infra-common-ASG2DrainECSHookFunctionD-jOqQ78AHDCMV",
"creationTime": 1739569849569,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASG2DrainECSHookFunctionD-jOqQ78AHDCMV:*",
"storedBytes": 8691425,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASG2DrainECSHookFunctionD-jOqQ78AHDCMV",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/mermaid-api-infra-common-ASGDrainECSHookFunction5F-cBJ4O7VOhPqb",
"creationTime": 1709601587581,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASGDrainECSHookFunction5F-cBJ4O7VOhPqb:*",
"storedBytes": 7190264,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASGDrainECSHookFunction5F-cBJ4O7VOhPqb",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/mermaid-guardduty-us-east-CreateGuardDutySLRB46D17-XYN27qQjxMm4",
"creationTime": 1762302496498,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-guardduty-us-east-CreateGuardDutySLRB46D17-XYN27qQjxMm4:*",
"storedBytes": 458,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-guardduty-us-east-CreateGuardDutySLRB46D17-XYN27qQjxMm4",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/mermaid-guardduty-us-east-GuardDutySLRProviderfram-97uPCmAWbvLV",
"creationTime": 1762302488954,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-guardduty-us-east-GuardDutySLRProviderfram-97uPCmAWbvLV:*",
"storedBytes": 811,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-guardduty-us-east-GuardDutySLRProviderfram-97uPCmAWbvLV",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/mermaid-vfl-s3-athena-InitializerAsync-nxDRJtyT6cGI",
"creationTime": 1734653014316,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-vfl-s3-athena-InitializerAsync-nxDRJtyT6cGI:*",
"storedBytes": 1596,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-vfl-s3-athena-InitializerAsync-nxDRJtyT6cGI",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/mermaid-vfl-s3-athena-Partitionerfl05a0b8c98de093d-ue6RLxKihuVX",
"creationTime": 1734656442430,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-vfl-s3-athena-Partitionerfl05a0b8c98de093d-ue6RLxKihuVX:*",
"storedBytes": 18372665,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-vfl-s3-athena-Partitionerfl05a0b8c98de093d-ue6RLxKihuVX",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/preview-webapp-CustomCDKBucketDeployment8693BB6496-uNELF3F2uTbv",
"creationTime": 1667230767301,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/preview-webapp-CustomCDKBucketDeployment8693BB6496-uNELF3F2uTbv:*",
"storedBytes": 215327,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/preview-webapp-CustomCDKBucketDeployment8693BB6496-uNELF3F2uTbv",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/preview-webapp-CustomS3AutoDeleteObjectsCustomReso-cJGE0m7L141W",
"creationTime": 1667230497375,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/preview-webapp-CustomS3AutoDeleteObjectsCustomReso-cJGE0m7L141W:*",
"storedBytes": 2503,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/preview-webapp-CustomS3AutoDeleteObjectsCustomReso-cJGE0m7L141W",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/preview-webapp-StaticSiteCertificateCertificateReq-w4rTSQ7K4Kwt",
"creationTime": 1667230517265,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/preview-webapp-StaticSiteCertificateCertificateReq-w4rTSQ7K4Kwt:*",
"storedBytes": 3727,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/preview-webapp-StaticSiteCertificateCertificateReq-w4rTSQ7K4Kwt",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-DFGXOsPz252z",
"creationTime": 1744919231470,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-DFGXOsPz252z:*",
"storedBytes": 72978,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-DFGXOsPz252z",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-RkBkNq243Fs8",
"creationTime": 1747937982491,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-RkBkNq243Fs8:*",
"storedBytes": 17395,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-RkBkNq243Fs8",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-Z3sYeu7Ef2n1",
"creationTime": 1747937405025,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-Z3sYeu7Ef2n1:*",
"storedBytes": 71629,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-explore-CustomCDKBucketDeployment8693BB649689-Z3sYeu7Ef2n1",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/prod-mermaid-inference-pyspacer",
"creationTime": 1786991325405,
"retentionInDays": 30,
"metricFilterCount": 2,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-mermaid-inference-pyspacer:*",
"storedBytes": 92872,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-mermaid-inference-pyspacer",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "/aws/lambda/prod-webapp-CustomCDKBucketDeployment8693BB6496894-dXGucRjcq2w5",
"creationTime": 1674022263292,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-webapp-CustomCDKBucketDeployment8693BB6496894-dXGucRjcq2w5:*",
"storedBytes": 275809,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/prod-webapp-CustomCDKBucketDeployment8693BB6496894-dXGucRjcq2w5",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
}
],
"nextToken": "/aws/lambda/prod-webapp-CustomCDKBucketDeployment8693BB6496894-dXGucRjcq2w5"
}
}E010 · aws
{
"id": "E010",
"source": "aws",
"collected_at": "2026-10-18T18:40:36.783940+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "get_metric_data",
"parameters": {
"StartTime": "2026-10-17T22:00:00Z",
"EndTime": "2026-10-18T18:40:00Z",
"MetricDataQueries": [
{
"Id": "cpu",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "CPUUtilization",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 1800,
"Stat": "Maximum"
}
}
]
}
},
"result": {
"MetricDataResults": [
{
"Id": "cpu",
"Label": "CPUUtilization",
"Timestamps": [
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
98.41410132408365,
91.18525813289712
],
"StatusCode": "Complete"
}
],
"Messages": []
}
}E011 · aws
{
"id": "E011",
"source": "aws",
"collected_at": "2026-10-18T18:40:37.295844+00:00",
"error": false,
"arguments": {
"service": "logs",
"operation": "describe_log_groups",
"parameters": {
"logGroupNamePattern": "mermaid-api",
"limit": 50
}
},
"result": {
"logGroups": [
{
"logGroupName": "/aws/ecs/containerinsights/mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS/performance",
"creationTime": 1709232272303,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS/performance:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS/performance"
},
{
"logGroupName": "/aws/ecs/containerinsights/mermaid-api-infra-common-MermaidApiClusterB0854EC6-xitj9XbqTwap/performance",
"creationTime": 1657153059290,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-MermaidApiClusterB0854EC6-xitj9XbqTwap/performance:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/ecs/containerinsights/mermaid-api-infra-common-MermaidApiClusterB0854EC6-xitj9XbqTwap/performance"
},
{
"logGroupName": "/aws/lambda/dev-mermaid-api-django-GeneralLambdaWorkerWorkerFu-qW5uYKCG9INg",
"creationTime": 1738180909444,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-api-django-GeneralLambdaWorkerWorkerFu-qW5uYKCG9INg:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/dev-mermaid-api-django-GeneralLambdaWorkerWorkerFu-qW5uYKCG9INg"
},
{
"logGroupName": "/aws/lambda/mermaid-api-infra-common-ASG2DrainECSHookFunctionD-jOqQ78AHDCMV",
"creationTime": 1739569849569,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASG2DrainECSHookFunctionD-jOqQ78AHDCMV:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASG2DrainECSHookFunctionD-jOqQ78AHDCMV"
},
{
"logGroupName": "/aws/lambda/mermaid-api-infra-common-ASGDrainECSHookFunction5F-cBJ4O7VOhPqb",
"creationTime": 1709601587581,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASGDrainECSHookFunction5F-cBJ4O7VOhPqb:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:/aws/lambda/mermaid-api-infra-common-ASGDrainECSHookFunction5F-cBJ4O7VOhPqb"
},
{
"logGroupName": "aws-waf-logs-mermaid-api",
"creationTime": 1778021581819,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:aws-waf-logs-mermaid-api:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:aws-waf-logs-mermaid-api"
},
{
"logGroupName": "dev-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-FOhf1yOLr8Fq",
"creationTime": 1778103710426,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-FOhf1yOLr8Fq:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-FOhf1yOLr8Fq"
},
{
"logGroupName": "dev-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-INVM9uofUt9D",
"creationTime": 1738013839460,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-INVM9uofUt9D:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-INVM9uofUt9D"
},
{
"logGroupName": "dev-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-TbvYJAGAZoqp",
"creationTime": 1709232171167,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-TbvYJAGAZoqp:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-TbvYJAGAZoqp"
},
{
"logGroupName": "dev-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-syeqeeJv2o27",
"creationTime": 1674655168854,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-syeqeeJv2o27:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-syeqeeJv2o27"
},
{
"logGroupName": "dev-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-bxHdAGCji8Ry",
"creationTime": 1666303017004,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-bxHdAGCji8Ry:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-bxHdAGCji8Ry"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-0p9Is0KtXbQs",
"creationTime": 1738013839454,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-0p9Is0KtXbQs:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-0p9Is0KtXbQs"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-EgjoQS3Um7RJ",
"creationTime": 1732302154714,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-EgjoQS3Um7RJ:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-EgjoQS3Um7RJ"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-IZll2lUXHHPW",
"creationTime": 1736897445980,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-IZll2lUXHHPW:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-IZll2lUXHHPW"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-kemFQkAgVJcK",
"creationTime": 1736892089304,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-kemFQkAgVJcK:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-kemFQkAgVJcK"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-nWOTYPHkj8Ig",
"creationTime": 1737047626920,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-nWOTYPHkj8Ig:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-nWOTYPHkj8Ig"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-rFqkJsVjb8Gh",
"creationTime": 1736899439001,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-rFqkJsVjb8Gh:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-rFqkJsVjb8Gh"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-s0OGsTIh5Y1o",
"creationTime": 1736895084542,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-s0OGsTIh5Y1o:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-s0OGsTIh5Y1o"
},
{
"logGroupName": "dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup4AA8DF80-utK1sLGuQafC",
"creationTime": 1778103710514,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup4AA8DF80-utK1sLGuQafC:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup4AA8DF80-utK1sLGuQafC"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-GCY0ZvgK4hyg",
"creationTime": 1736897445923,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-GCY0ZvgK4hyg:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-GCY0ZvgK4hyg"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-OPZj9CBE8c2r",
"creationTime": 1736892089278,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-OPZj9CBE8c2r:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-OPZj9CBE8c2r"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-RXpzQ8qEDaqy",
"creationTime": 1736899438905,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-RXpzQ8qEDaqy:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-RXpzQ8qEDaqy"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-V0I0KUA7mNS4",
"creationTime": 1736895084452,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-V0I0KUA7mNS4:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-V0I0KUA7mNS4"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-Vnk8HVpLhl97",
"creationTime": 1738013839713,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-Vnk8HVpLhl97:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-Vnk8HVpLhl97"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-ZbEsq3qUQVyk",
"creationTime": 1737047626891,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-ZbEsq3qUQVyk:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-ZbEsq3qUQVyk"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-raYww80hbsZX",
"creationTime": 1732302154783,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-raYww80hbsZX:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-raYww80hbsZX"
},
{
"logGroupName": "dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup6799C322-pL20oFCWIGjK",
"creationTime": 1778103710349,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup6799C322-pL20oFCWIGjK:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup6799C322-pL20oFCWIGjK"
},
{
"logGroupName": "dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-NWeqrSydKXOG",
"creationTime": 1709762131145,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-NWeqrSydKXOG:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-NWeqrSydKXOG"
},
{
"logGroupName": "dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-O70wmXHxpCbZ",
"creationTime": 1736972039590,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-O70wmXHxpCbZ:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-O70wmXHxpCbZ"
},
{
"logGroupName": "dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-efVnkB8PVGUC",
"creationTime": 1709763851262,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-efVnkB8PVGUC:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-efVnkB8PVGUC"
},
{
"logGroupName": "dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-efcl6MXe3JPc",
"creationTime": 1732553712364,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-efcl6MXe3JPc:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-efcl6MXe3JPc"
},
{
"logGroupName": "dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-mKz47C3canrn",
"creationTime": 1709762817894,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-mKz47C3canrn:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ImageWorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup538C97C4-mKz47C3canrn"
},
{
"logGroupName": "dev-mermaid-api-django-SQSWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4F380F40-Rr52w9vXm54O",
"creationTime": 1666305339834,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SQSWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4F380F40-Rr52w9vXm54O:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SQSWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4F380F40-Rr52w9vXm54O"
},
{
"logGroupName": "dev-mermaid-api-django-ScheduledBackupTaskDefBackupAdotCollectorLogGroup5BB2C11C-sNgb9rUUOZc7",
"creationTime": 1778103710292,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskDefBackupAdotCollectorLogGroup5BB2C11C-sNgb9rUUOZc7:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskDefBackupAdotCollectorLogGroup5BB2C11C-sNgb9rUUOZc7"
},
{
"logGroupName": "dev-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-CEvKCqzgyfJ4",
"creationTime": 1738013839829,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-CEvKCqzgyfJ4:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-CEvKCqzgyfJ4"
},
{
"logGroupName": "dev-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-mNY6zkwHZUxV",
"creationTime": 1718126837325,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-mNY6zkwHZUxV:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-mNY6zkwHZUxV"
},
{
"logGroupName": "dev-mermaid-api-django-ScheduledBackupTaskScheduledTaskDefScheduledContainerLogGroup1859A464-sdu37qA0i965",
"creationTime": 1666303016561,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskScheduledTaskDefScheduledContainerLogGroup1859A464-sdu37qA0i965:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledBackupTaskScheduledTaskDefScheduledContainerLogGroup1859A464-sdu37qA0i965"
},
{
"logGroupName": "dev-mermaid-api-django-ScheduledSummaryCacheTaskDefScheduledSummaryCacheUpdateContainerLogGroupE5EC6B86-L2RMBEYWP2Gi",
"creationTime": 1738258062923,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledSummaryCacheTaskDefScheduledSummaryCacheUpdateContainerLogGroupE5EC6B86-L2RMBEYWP2Gi:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-ScheduledSummaryCacheTaskDefScheduledSummaryCacheUpdateContainerLogGroupE5EC6B86-L2RMBEYWP2Gi"
},
{
"logGroupName": "dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheAdotCollectorLogGroupCCA323AA-2oCBQDnDmGIh",
"creationTime": 1778103711445,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheAdotCollectorLogGroupCCA323AA-2oCBQDnDmGIh:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheAdotCollectorLogGroupCCA323AA-2oCBQDnDmGIh"
},
{
"logGroupName": "dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-J2XMjF5kCfvq",
"creationTime": 1738354998639,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-J2XMjF5kCfvq:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-J2XMjF5kCfvq"
},
{
"logGroupName": "dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-VupYyzHFUlSi",
"creationTime": 1738353318401,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-VupYyzHFUlSi:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-VupYyzHFUlSi"
},
{
"logGroupName": "dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-GButgQZAprYA",
"creationTime": 1736972039448,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-GButgQZAprYA:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-GButgQZAprYA"
},
{
"logGroupName": "dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-OQkud9U3uGRq",
"creationTime": 1732553712267,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-OQkud9U3uGRq:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-OQkud9U3uGRq"
},
{
"logGroupName": "dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-smQggv70zaeS",
"creationTime": 1709232171364,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-smQggv70zaeS:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerEC2WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup627C88A3-smQggv70zaeS"
},
{
"logGroupName": "dev-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-faDntrXF2gAp",
"creationTime": 1675451340243,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-faDntrXF2gAp:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:dev-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-faDntrXF2gAp"
},
{
"logGroupName": "mermaid-api-infra-common-ECSExecLogGroup95B1C6C8-ej4glUfyTKln",
"creationTime": 1665687863166,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:mermaid-api-infra-common-ECSExecLogGroup95B1C6C8-ej4glUfyTKln:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:mermaid-api-infra-common-ECSExecLogGroup95B1C6C8-ej4glUfyTKln"
},
{
"logGroupName": "prod-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-byawEP4kvCdE",
"creationTime": 1778755368423,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-byawEP4kvCdE:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-byawEP4kvCdE"
},
{
"logGroupName": "prod-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-4pf0ZSyg8PKf",
"creationTime": 1717004201963,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-4pf0ZSyg8PKf:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-4pf0ZSyg8PKf"
},
{
"logGroupName": "prod-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-FQREpnIhC73J",
"creationTime": 1674661877971,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-FQREpnIhC73J:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-FQREpnIhC73J"
},
{
"logGroupName": "prod-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-QFuXgyc9mDK3",
"creationTime": 1666637681175,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-QFuXgyc9mDK3:*",
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-QFuXgyc9mDK3"
}
],
"nextToken": "MV6zO6eD1CJ6LaNQ6C639VrCizuOkBoknBFDEZlh9FzeFWEPAZ_-PU7Nd6lvNW3vygKwBGSdJDIU0Qewy5agFsYFl5NINEi18x6Zp7WqruN5plI72nNazk1YBKGfX8CGULvJXqCahrjz-NkgVC6ZmN0mcxWbvB3_24kwEF5w_PtCA2wzp9LF5ZmpwTy0JGQv9CatPsBVy5FJSg7_eZNPY-Sdi8sfQn0OgsPS1ncHaWtz8sDNpwRGIPc_szrSWxs7CU19c5er_-lfQkE0eYesOrZQ_STrfOOD4S4LksYeljwrYpnI5S9gZVsve5-_NUxotCDwkJSVo7JUZ0FpYlJbEjuGIUuSROyaGTS5ytE4gtNm0FHNwj1ExmmsBw5o2W494uFy2XOQ8PKgJnZAmsfUNHdCKvurxrRLd-aUw7Y-4sNpJleJx8jIr9On1KZCjNERv_16_33ucWp8zoucIycyOsmDjSemrTWAT0VBMcm40dkQRUo4QSg3suvzC0MB0pnt"
}
}E012 · search
{
"id": "E012",
"source": "search",
"collected_at": "2026-10-18T18:40:37.442838+00:00",
"error": false,
"arguments": {
"query": "ScheduledFargateTask",
"source": "data-mermaid/mermaid-api"
},
"result": {
"matches": [
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 262,
"text": " daily_backup_task = ecs_patterns.ScheduledFargateTask("
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 273,
"text": " scheduled_fargate_task_definition_options=ecs_patterns.ScheduledFargateTaskDefinitionOptions("
}
],
"truncated": false
}
}E013 · search
{
"id": "E013",
"source": "search",
"collected_at": "2026-10-18T18:40:37.586128+00:00",
"error": false,
"arguments": {
"query": "Schedule.cron",
"source": "data-mermaid/mermaid-api"
},
"result": {
"matches": [
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 265,
"text": " schedule=appscaling.Schedule.cron(hour=\"0\", minute=\"0\"),"
}
],
"truncated": false
}
}E014 · aws
{
"id": "E014",
"source": "aws",
"collected_at": "2026-10-18T18:40:48.114448+00:00",
"error": false,
"arguments": {
"service": "logs",
"operation": "describe_log_groups",
"parameters": {
"logGroupNamePrefix": "prod-mermaid-api",
"limit": 50
}
},
"result": {
"logGroups": [
{
"logGroupName": "prod-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-byawEP4kvCdE",
"creationTime": 1778755368423,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-byawEP4kvCdE:*",
"storedBytes": 515823,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionApiAdotCollectorLogGroup236D5DC9-byawEP4kvCdE",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-4pf0ZSyg8PKf",
"creationTime": 1717004201963,
"retentionInDays": 30,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-4pf0ZSyg8PKf:*",
"storedBytes": 0,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ApiTaskDefinitionMermaidAPILogGroup6992B9E7-4pf0ZSyg8PKf",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-FQREpnIhC73J",
"creationTime": 1674661877971,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-FQREpnIhC73J:*",
"storedBytes": 92,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-DailySummaryTaskScheduledTaskDefScheduledContainerLogGroupB0E86FFD-FQREpnIhC73J",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-QFuXgyc9mDK3",
"creationTime": 1666637681175,
"retentionInDays": 30,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-QFuXgyc9mDK3:*",
"storedBytes": 0,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-FargateTaskDefinitionMermaidAPILogGroup929C145B-QFuXgyc9mDK3",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-ZLljqN9Qgxvy",
"creationTime": 1737475049229,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-ZLljqN9Qgxvy:*",
"storedBytes": 139076278,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroupAD793505-ZLljqN9Qgxvy",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup4AA8DF80-eiWz5MjTiWj8",
"creationTime": 1778755367354,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup4AA8DF80-eiWz5MjTiWj8:*",
"storedBytes": 641825,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-GeneralWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup4AA8DF80-eiWz5MjTiWj8",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-3HM7I5EcK2me",
"creationTime": 1737475049149,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-3HM7I5EcK2me:*",
"storedBytes": 17091216,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4AFCE51C-3HM7I5EcK2me",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup6799C322-as3QWmCUtl2K",
"creationTime": 1778755367503,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup6799C322-as3QWmCUtl2K:*",
"storedBytes": 140279,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ImageProcessWorkerQueueProcessingTaskDefWorkerAdotCollectorLogGroup6799C322-as3QWmCUtl2K",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ImageWorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupF849DA6D-enqBvdtAFh2Y",
"creationTime": 1717004202220,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ImageWorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupF849DA6D-enqBvdtAFh2Y:*",
"storedBytes": 3090572,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ImageWorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroupF849DA6D-enqBvdtAFh2Y",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-SQSWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4F380F40-RxaVcH5rexTG",
"creationTime": 1666637681483,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SQSWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4F380F40-RxaVcH5rexTG:*",
"storedBytes": 952503,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SQSWorkerQueueProcessingTaskDefQueueProcessingContainerLogGroup4F380F40-RxaVcH5rexTG",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ScheduledBackupTaskDefBackupAdotCollectorLogGroup5BB2C11C-aFrqweePzQsG",
"creationTime": 1778755367211,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ScheduledBackupTaskDefBackupAdotCollectorLogGroup5BB2C11C-aFrqweePzQsG:*",
"storedBytes": 437336,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ScheduledBackupTaskDefBackupAdotCollectorLogGroup5BB2C11C-aFrqweePzQsG",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-xl4mnGNXxvA2",
"creationTime": 1718136860999,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-xl4mnGNXxvA2:*",
"storedBytes": 13273736,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ScheduledBackupTaskDefScheduledBackupContainerLogGroupA5878946-xl4mnGNXxvA2",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-ScheduledBackupTaskScheduledTaskDefScheduledContainerLogGroup1859A464-GjgJrhzOpocD",
"creationTime": 1666637680670,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ScheduledBackupTaskScheduledTaskDefScheduledContainerLogGroup1859A464-GjgJrhzOpocD:*",
"storedBytes": 12241185,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-ScheduledBackupTaskScheduledTaskDefScheduledContainerLogGroup1859A464-GjgJrhzOpocD",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheAdotCollectorLogGroupCCA323AA-6Jxm6oBH97Ro",
"creationTime": 1778755367296,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheAdotCollectorLogGroupCCA323AA-6Jxm6oBH97Ro:*",
"storedBytes": 184114,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheAdotCollectorLogGroupCCA323AA-6Jxm6oBH97Ro",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-A98SuFfhYcjE",
"creationTime": 1738613117931,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-A98SuFfhYcjE:*",
"storedBytes": 86044462,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-A98SuFfhYcjE",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-SUe9RAnXMsP3",
"creationTime": 1738606057491,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-SUe9RAnXMsP3:*",
"storedBytes": 0,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-SUe9RAnXMsP3",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
},
{
"logGroupName": "prod-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-8pp9QK9qYuyw",
"creationTime": 1676572642754,
"metricFilterCount": 0,
"arn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-8pp9QK9qYuyw:*",
"storedBytes": 853777709,
"logGroupClass": "STANDARD",
"logGroupArn": "arn:aws:logs:us-east-1:554812291621:log-group:prod-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-8pp9QK9qYuyw",
"deletionProtectionEnabled": false,
"bearerTokenAuthenticationEnabled": "[REDACTED]"
}
]
}
}E015 · aws
{
"id": "E015",
"source": "aws",
"collected_at": "2026-10-18T18:40:48.388180+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "get_metric_data",
"parameters": {
"StartTime": "2026-10-11T00:00:00Z",
"EndTime": "2026-10-18T18:30:00Z",
"MetricDataQueries": [
{
"Id": "cpu",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "CPUUtilization",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 3600,
"Stat": "Average"
}
}
]
}
},
"result": {
"MetricDataResults": [
{
"Id": "cpu",
"Label": "CPUUtilization",
"Timestamps": [
"2026-10-17 13:20:00-07:00"
],
"Values": [
67.0580925052294
],
"StatusCode": "Complete"
}
],
"Messages": []
}
}E016 · aws
{
"id": "E016",
"source": "aws",
"collected_at": "2026-10-18T18:40:49.044027+00:00",
"error": false,
"arguments": {
"service": "cloudtrail",
"operation": "lookup_events",
"parameters": {
"StartTime": "2026-10-17T19:30:00Z",
"EndTime": "2026-10-17T21:00:00Z",
"MaxResults": 50
}
},
"result": {
"Events": [
{
"EventId": "13361fad-4165-35dd-8990-89eebe4e537a",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:29-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:29Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDI5NjgwOlI6a0hTM2k3c2c=\"}, \"requestID\": \"98daa37c-e283-4b28-94ed-6d9aaad74e29\", \"eventID\": \"13361fad-4165-35dd-8990-89eebe4e537a\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"31ec3064-1080-41b2-acf6-ae22b007f1d4\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "14d3675b-58a7-42e9-9a76-d24d9d42e3dd",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:20:28-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:20:28Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:28Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"dev-mermaid-api-django-GeneralWorkerQueueProcessingService2ABCF4FE-0QfAZtp1Qt3z\"]}, \"responseElements\": null, \"requestID\": \"ea3a7764-5801-405a-88a2-c42eb4f56a55\", \"eventID\": \"14d3675b-58a7-42e9-9a76-d24d9d42e3dd\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "cd52e9ce-144d-3eff-92ae-9431496ebd3c",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:28-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:28Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"roleSessionName\": \"AutoScaling-RetrieveCurrentCapacity\", \"durationSeconds\": 900}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDI4NDI2OlI6ZnA2dDdYb08=\"}, \"requestID\": \"341dcc92-5b36-4865-b956-00d1da92a469\", \"eventID\": \"cd52e9ce-144d-3eff-92ae-9431496ebd3c\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"0cd0fd86-6e98-4b7b-9cf1-e3112510f0af\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "e60474d4-334a-36f4-b11a-51a9ddc91c9a",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:28-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:28Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDI4NDAxOlI6aHF5NlVaS3A=\"}, \"requestID\": \"aacdd45e-dd51-4b70-a83d-84d78b6d3afc\", \"eventID\": \"e60474d4-334a-36f4-b11a-51a9ddc91c9a\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"35d06d5e-f774-4ab7-b8b2-0efdf537ba85\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "13ceb398-0a2e-3992-9149-e565b3b53da3",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:26-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:26Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDI2ODI1OlI6QWhkeUEyZkY=\"}, \"requestID\": \"f64b0945-0a95-4664-8261-e99e8b49c683\", \"eventID\": \"13ceb398-0a2e-3992-9149-e565b3b53da3\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"edaccb6e-f2df-4b08-8cba-9494930e0d58\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "aa7f3e64-ad76-47d2-bc89-15ca6ba3aee0",
"EventName": "DescribeInstanceStatus",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:20:25-07:00",
"EventSource": "ec2.amazonaws.com",
"Username": "AutoScaling",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXISW7SC4IFTJ:AutoScaling\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForAutoScaling/AutoScaling\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXISW7SC4IFTJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/autoscaling.amazonaws.com/AWSServiceRoleForAutoScaling\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForAutoScaling\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:06:26Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:25Z\", \"eventSource\": \"ec2.amazonaws.com\", \"eventName\": \"DescribeInstanceStatus\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"autoscaling.amazonaws.com\", \"userAgent\": \"autoscaling.amazonaws.com\", \"requestParameters\": {\"instancesSet\": {\"items\": [{\"instanceId\": \"i-06c76f963c31a7273\"}, {\"instanceId\": \"i-00da31f914718e81c\"}, {\"instanceId\": \"i-02efeafec080c2f68\"}, {\"instanceId\": \"i-0ed65ac2acc294334\"}, {\"instanceId\": \"i-05f4327aae8534e35\"}, {\"instanceId\": \"i-06017d3b88a391dc4\"}, {\"instanceId\": \"i-018d434ee7357670a\"}, {\"instanceId\": \"i-0286f17a3ec265af7\"}]}, \"filterSet\": {}, \"includeAllInstances\": true, \"includeManagedResources\": true}, \"responseElements\": null, \"requestID\": \"3ff765ff-bafc-43dd-bf8c-94588bb43b64\", \"eventID\": \"aa7f3e64-ad76-47d2-bc89-15ca6ba3aee0\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "a54b0258-8f23-448b-9625-6341158f6efe",
"EventName": "DescribeTargetHealth",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:20:24-07:00",
"EventSource": "elasticloadbalancing.amazonaws.com",
"Username": "ecs-service-scheduler",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI:ecs-service-scheduler\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForECS/ecs-service-scheduler\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForECS\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:15:53Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:24Z\", \"eventSource\": \"elasticloadbalancing.amazonaws.com\", \"eventName\": \"DescribeTargetHealth\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.amazonaws.com\", \"userAgent\": \"ecs.amazonaws.com\", \"requestParameters\": {\"targetGroupArn\": \"arn:aws:elasticloadbalancing:us-east-1:554812291621:targetgroup/dev-me-Targe-MYGE1DS5B433/8fef8dd04bad0a11\"}, \"responseElements\": null, \"requestID\": \"98bbf0b7-97fd-43b6-bed7-86bd4ba5dd5e\", \"eventID\": \"a54b0258-8f23-448b-9625-6341158f6efe\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"apiVersion\": \"2015-12-01\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "c7a6f215-b808-3a34-a4ca-04b60aa48fef",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:24-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:24Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDI0MjkyOlI6NnVWd0Z1cHg=\"}, \"requestID\": \"a52b2e2c-5ced-4730-949b-560e049d08fe\", \"eventID\": \"c7a6f215-b808-3a34-a4ca-04b60aa48fef\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"28eb45af-c886-46b4-abde-731a34934aa3\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "17777810-3148-3776-b6aa-4d6d6320280a",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:20-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:20Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDIwMTI4OlI6WW1iTHRuMnA=\"}, \"requestID\": \"97dcd37d-a679-4aa7-8cc5-22bc93835f00\", \"eventID\": \"17777810-3148-3776-b6aa-4d6d6320280a\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"768e2277-bd66-4d05-9730-2d64f68c6809\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "e33bc3ca-7adb-4afc-9391-d22d4d6b9926",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:20:19-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:18:28Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:19Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"prod-mermaid-api-django-GeneralWorkerQueueProcessingService2ABCF4FE-kvrdfXw5IfXr\"]}, \"responseElements\": null, \"requestID\": \"655a1c78-3539-403d-8eba-525c823e04ff\", \"eventID\": \"e33bc3ca-7adb-4afc-9391-d22d4d6b9926\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "48314e6a-cf36-3dad-9c1c-dacca010aeab",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:08-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:08Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"roleSessionName\": \"AutoScaling-RetrieveCurrentCapacity\", \"durationSeconds\": 900}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDA4NTg3OlI6R25HSzBScWY=\"}, \"requestID\": \"45198208-f273-4285-a93b-5848ebde3a34\", \"eventID\": \"48314e6a-cf36-3dad-9c1c-dacca010aeab\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"bc1f9c23-b912-4bc5-9c19-f49be02b76fd\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "e5f647db-f7f4-4828-a8ea-b7adc7b8d8a3",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:20:08-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:20:08Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:08Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"dev-mermaid-api-django-ImageProcessWorkerQueueProcessingServiceABC33BC0-T6xVl1MXJW3C\"]}, \"responseElements\": null, \"requestID\": \"6b786e89-6d66-4660-b196-50c0c0bc135c\", \"eventID\": \"e5f647db-f7f4-4828-a8ea-b7adc7b8d8a3\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "6b849dc5-1845-3af5-8f1e-48cd67fa4122",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:03-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:03Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDAzNzQ0OlI6VjM4ZVNvNEI=\"}, \"requestID\": \"57202a37-adb4-4c53-825d-864e3cb4b9ce\", \"eventID\": \"6b849dc5-1845-3af5-8f1e-48cd67fa4122\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"ac597448-a037-4b25-b7aa-f0b9c0a5df24\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "ea37b4f7-d7e3-47bd-96f1-cf9909f8d0d7",
"EventName": "DescribeTargetHealth",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:20:03-07:00",
"EventSource": "elasticloadbalancing.amazonaws.com",
"Username": "ecs-service-scheduler",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI:ecs-service-scheduler\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForECS/ecs-service-scheduler\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForECS\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:13:13Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:03Z\", \"eventSource\": \"elasticloadbalancing.amazonaws.com\", \"eventName\": \"DescribeTargetHealth\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.amazonaws.com\", \"userAgent\": \"ecs.amazonaws.com\", \"requestParameters\": {\"targetGroupArn\": \"arn:aws:elasticloadbalancing:us-east-1:554812291621:targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8\"}, \"responseElements\": null, \"requestID\": \"a03602ef-0580-496c-9721-70e4f0888106\", \"eventID\": \"ea37b4f7-d7e3-47bd-96f1-cf9909f8d0d7\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"apiVersion\": \"2015-12-01\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "4d816977-78f5-36dd-ae8c-8f2fc69aa79d",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:01-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:01Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDAxMjUzOlI6TFpoM3Zabkg=\"}, \"requestID\": \"83abecb1-7a34-4418-885a-8d812150bf72\", \"eventID\": \"4d816977-78f5-36dd-ae8c-8f2fc69aa79d\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"6d1ebd03-b970-49f8-b6e1-e68b2e9abab6\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "e17db950-51c9-31fd-87bf-c3999af2a2e7",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:20:01-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:20:01Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcyMDAxMjU3OlI6Zm5TUXQxRGk=\"}, \"requestID\": \"cdc476c5-ce42-4cb5-ab64-47b94ae5739f\", \"eventID\": \"e17db950-51c9-31fd-87bf-c3999af2a2e7\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"50e519d5-0b09-4e89-a404-b703fd6fd6d1\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "58bc6514-0270-426c-98b8-0eeb954976f4",
"EventName": "UpdateInstanceInformation",
"ReadOnly": "false",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:58-07:00",
"EventSource": "ssm.amazonaws.com",
"Username": "i-06c76f963c31a7273",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXISXWZSDJ7BX:i-06c76f963c31a7273\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWS-QuickSetup-SSM-DefaultEC2MgmtRole-us-east-1/i-06c76f963c31a7273\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXISXWZSDJ7BX\", \"arn\": \"arn:aws:iam::554812291621:role/AWS-QuickSetup-SSM-DefaultEC2MgmtRole-us-east-1\", \"accountId\": \"554812291621\", \"userName\": \"AWS-QuickSetup-SSM-DefaultEC2MgmtRole-us-east-1\"}, \"attributes\": {\"creationDate\": \"2026-10-17T20:39:33Z\", \"mfaAuthenticated\": \"false\"}}}, \"eventTime\": \"2026-10-17T21:19:58Z\", \"eventSource\": \"ssm.amazonaws.com\", \"eventName\": \"UpdateInstanceInformation\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"44.206.31.158\", \"userAgent\": \"aws-sdk-go/1.55.5 (go1.26.8; linux; amd64) amazon-ssm-agent/3.3.5390.0\", \"requestParameters\": {\"instanceId\": \"i-06c76f963c31a7273\", \"agentVersion\": \"3.3.5390.0\", \"agentStatus\": \"Active\", \"platformType\": \"Linux\", \"platformName\": \"Amazon Linux\", \"platformVersion\": \"2023\", \"iPAddress\": \"HIDDEN_DUE_TO_SECURITY_REASONS\", \"computerName\": \"ip-10-10-16-151.ec2.internal\", \"agentName\": \"amazon-ssm-agent\", \"availabilityZone\": \"us-east-1a\", \"availabilityZoneId\": \"use1-az6\", \"sSMConnectionChannel\": \"ssmmessages\"}, \"responseElements\": null, \"requestID\": \"c944aeee-6118-41bf-95b5-69bd442eb23f\", \"eventID\": \"58bc6514-0270-426c-98b8-0eeb954976f4\", \"readOnly\": false, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\", \"tlsDetails\": {\"tlsVersion\": \"TLSv1.2\", \"cipherSuite\": \"ECDHE-RSA-AES128-GCM-SHA256\", \"clientProvidedHostHeader\": \"ssm.us-east-1.amazonaws.com\"}}"
},
{
"EventId": "28beae0f-e61b-3576-92d2-6f98bf937f6e",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:56-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:56Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTk2MjI0OlI6dEplcDBYSnQ=\"}, \"requestID\": \"87074493-b8e3-4fb0-842e-6bcd04c43060\", \"eventID\": \"28beae0f-e61b-3576-92d2-6f98bf937f6e\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"276a0506-aecf-4cdb-9b85-e3eda0ebe0df\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "1a7e4533-b078-391f-b62f-d0765ff030de",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:55-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:55Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTk1MzQ2OlI6SGJ4UnVPeFM=\"}, \"requestID\": \"40101ba9-c0df-46e5-991c-ad2eb2fad989\", \"eventID\": \"1a7e4533-b078-391f-b62f-d0765ff030de\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"7f2a6a79-a452-4e6d-8fa2-6fc9febe2bfd\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "4964370f-0d76-30e3-809c-7ac79e7dd6cf",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:55-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:55Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"roleSessionName\": \"AutoScaling-RetrieveCurrentCapacity\", \"durationSeconds\": 900}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTk1MzgwOlI6WVg5anNGZ00=\"}, \"requestID\": \"0ebfd8c9-8fe0-475c-8935-b3f2b1b300f9\", \"eventID\": \"4964370f-0d76-30e3-809c-7ac79e7dd6cf\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"b6b57053-1af7-4309-94d0-7ec21b281e00\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "bfa4b980-6ed0-4abb-9863-1c55f0d9f182",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:55-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:19:55Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:55Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"prod-mermaid-api-django-ImageProcessWorkerQueueProcessingServiceABC33BC0-euJs4RQjKsd3\"]}, \"responseElements\": null, \"requestID\": \"07ee6a31-04bf-4898-bcbd-ae3df82a2e30\", \"eventID\": \"bfa4b980-6ed0-4abb-9863-1c55f0d9f182\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "4a5f3961-c0e1-304b-a283-c8f442dab9c1",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:54-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:54Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTk0NTczOlI6c0V4aHAzeWU=\"}, \"requestID\": \"c52d1ffc-fb08-4a5d-a036-61325d4fe0fb\", \"eventID\": \"4a5f3961-c0e1-304b-a283-c8f442dab9c1\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"607c8a35-744e-4edb-9665-370c0ee702d9\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "ca0914be-b885-3c1c-9faf-da507dac0a85",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:53-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:53Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTkzMzYyOlI6VXFTejNGVkQ=\"}, \"requestID\": \"78833cb3-41ff-4a34-a180-6c396199d78d\", \"eventID\": \"ca0914be-b885-3c1c-9faf-da507dac0a85\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"b829bd54-0781-4e9a-9f6d-4919d612f063\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "6562f823-a591-35cb-b521-2ef90eec4b0a",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:52-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:52Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTkyMDY2OlI6MFR4TVlpSUg=\"}, \"requestID\": \"51c6a0be-7346-4cc9-b706-42d915cfd281\", \"eventID\": \"6562f823-a591-35cb-b521-2ef90eec4b0a\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"3a3053ca-010e-4447-8283-e1802c6a23f8\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "6352794b-680e-3c21-81b3-c8ccd08d9b4b",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:51-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:51Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTkxMTYxOlI6R3ZLVWl4c3E=\"}, \"requestID\": \"27216cb5-80fb-4dee-8a99-a28c02786ae4\", \"eventID\": \"6352794b-680e-3c21-81b3-c8ccd08d9b4b\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"ecb62dd6-7530-418e-a7d2-d066e115b31d\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "24616ca6-56b3-3190-9292-93e212c07440",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:50-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:50Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTkwMDczOlI6Nm1KT2FNa3c=\"}, \"requestID\": \"9925e3f9-65dd-43aa-a532-b8c2df2ce022\", \"eventID\": \"24616ca6-56b3-3190-9292-93e212c07440\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"0d2ddb25-e24f-439e-99e3-c7a8e199346c\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "51c8100b-1b9c-3f43-8176-37cd30bd4bfd",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:50-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:50Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTkwMDUxOlI6YUZNSFdkckU=\"}, \"requestID\": \"c47d3ef3-83b0-4a4a-a2ef-17647b4d13e2\", \"eventID\": \"51c8100b-1b9c-3f43-8176-37cd30bd4bfd\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"318f5612-fa6b-416e-9237-06ff1f4fdf73\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "7e13a76e-ccce-3b78-93d6-e0ac9023417b",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:48-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:48Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTg4NTU0OlI6VE8yRzJ5N1E=\"}, \"requestID\": \"c443edee-1234-4e79-b5d5-c1c114eb12f9\", \"eventID\": \"7e13a76e-ccce-3b78-93d6-e0ac9023417b\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"945fdad1-2a58-4843-bff9-2153fcb5a0c9\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "2d2707a3-6f88-31a2-a199-22b18cb90022",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:46-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:46Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTg2NjgzOlI6TTlLSlBvd2E=\"}, \"requestID\": \"9dbda2df-5e2a-4cb0-86f3-bf64fbc3b95d\", \"eventID\": \"2d2707a3-6f88-31a2-a199-22b18cb90022\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"73b6ecb0-19dc-4709-b4c0-6bdfc64a69b0\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "cb9aa848-6ca6-3e22-9ae9-4d3a563f8293",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:44-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:44Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTg0MzUzOlI6Wjd2c2E2U0k=\"}, \"requestID\": \"8bb0ab9b-2b76-4387-ba84-75fe928369a2\", \"eventID\": \"cb9aa848-6ca6-3e22-9ae9-4d3a563f8293\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"f5439bf6-d9ce-442b-b02f-f4a29eb950f7\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "e6752b9b-0a46-3269-907e-6a351ec2408d",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:44-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:44Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTg0OTM5OlI6RWt5MnMwV3I=\"}, \"requestID\": \"93c209ea-3933-4b70-80ea-2f68d27b16a5\", \"eventID\": \"e6752b9b-0a46-3269-907e-6a351ec2408d\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"b5b7de85-8955-4fb7-86a9-53dabeb3f775\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "4fad607e-33be-3548-a601-79f6dab57c4e",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:43-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:43Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTgzMzU1OlI6Y3l3bEVyODE=\"}, \"requestID\": \"15df1bde-3f89-4ab7-bf0b-1ee62c845840\", \"eventID\": \"4fad607e-33be-3548-a601-79f6dab57c4e\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"c3bd6eb9-b2aa-4bf3-aebc-efa4a3e41373\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "355b841d-bbe4-4e80-9500-56a90341e710",
"EventName": "DescribeTargetHealth",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:41-07:00",
"EventSource": "elasticloadbalancing.amazonaws.com",
"Username": "ecs-service-scheduler",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI:ecs-service-scheduler\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForECS/ecs-service-scheduler\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForECS\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:15:53Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:41Z\", \"eventSource\": \"elasticloadbalancing.amazonaws.com\", \"eventName\": \"DescribeTargetHealth\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.amazonaws.com\", \"userAgent\": \"ecs.amazonaws.com\", \"requestParameters\": {\"targetGroupArn\": \"arn:aws:elasticloadbalancing:us-east-1:554812291621:targetgroup/dev-me-Targe-MYGE1DS5B433/8fef8dd04bad0a11\"}, \"responseElements\": null, \"requestID\": \"45975739-e409-4838-929e-ee901aad1f6f\", \"eventID\": \"355b841d-bbe4-4e80-9500-56a90341e710\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"apiVersion\": \"2015-12-01\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "9a86a7bf-94b9-380f-a4f7-51318de1abe3",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:39-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:39Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTc5OTY1OlI6cU9uTlNxd24=\"}, \"requestID\": \"2179b1b5-381f-4c1a-9f13-566fd7d9e270\", \"eventID\": \"9a86a7bf-94b9-380f-a4f7-51318de1abe3\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"bf29c974-7071-4350-823a-8c5dcc065f7a\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "360474da-2e7d-3b8a-a3a5-264afa468bfc",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:38-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:38Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"roleSessionName\": \"AutoScaling-RetrieveCurrentCapacity\", \"durationSeconds\": 900}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTc4NDg2OlI6Z3J3emJ2U1o=\"}, \"requestID\": \"c94caf2d-0ece-4d73-a9cf-af1e7043ccf4\", \"eventID\": \"360474da-2e7d-3b8a-a3a5-264afa468bfc\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"8dfd34ce-e3b9-4d95-a774-28c5f3b3980c\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "f3ed9f1b-3661-4747-90f7-8f0349603ba5",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:38-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:19:38Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:38Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"dev-mermaid-api-django-GeneralWorkerQueueProcessingService2ABCF4FE-0QfAZtp1Qt3z\"]}, \"responseElements\": null, \"requestID\": \"add357e8-cfe8-484f-802b-86514d037ec0\", \"eventID\": \"f3ed9f1b-3661-4747-90f7-8f0349603ba5\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "106106de-e185-4a7e-b2e0-99d8f73e30f2",
"EventName": "DescribeAutoScalingGroups",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:34-07:00",
"EventSource": "autoscaling.amazonaws.com",
"Username": "ecs-autoscaling",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI:ecs-autoscaling\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForECS/ecs-autoscaling\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7ZS6MG2LI\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.amazonaws.com/AWSServiceRoleForECS\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForECS\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:16:34Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:34Z\", \"eventSource\": \"autoscaling.amazonaws.com\", \"eventName\": \"DescribeAutoScalingGroups\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.amazonaws.com\", \"userAgent\": \"ecs.amazonaws.com\", \"requestParameters\": {\"autoScalingGroupNames\": [\"mermaid-api-infra-common-ASG2ASG5BFD3F19-osZjaeUXzwn3\"]}, \"responseElements\": null, \"requestID\": \"50149b3d-9d48-446b-a4f7-c9bd42bc2b24\", \"eventID\": \"106106de-e185-4a7e-b2e0-99d8f73e30f2\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "6945dabe-ce8f-3bda-809f-cc25e3c85967",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:34-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:34Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTc0NjgzOlI6Q0g5YlFlZm4=\"}, \"requestID\": \"50291d49-d40e-4e31-8b64-bad63223623e\", \"eventID\": \"6945dabe-ce8f-3bda-809f-cc25e3c85967\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"4c5a5c69-ce77-402c-bf51-0b965fa0fa7a\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "352d285a-d6e5-38f1-8a72-224c9cfe32c8",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:30-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:30Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTcwNzYyOlI6RlVmbVVwWDI=\"}, \"requestID\": \"27cbc9aa-7851-4639-84d3-4c0a0aa24bc2\", \"eventID\": \"352d285a-d6e5-38f1-8a72-224c9cfe32c8\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"a7eac290-3394-4c93-8e4a-27640f873a14\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "92804421-41da-3df3-a364-7d11e931d562",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:30-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:30Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTcwNjU4OlI6WXJQdmVDVEo=\"}, \"requestID\": \"ad4d9cb8-ec73-4225-be79-d708335b4c21\", \"eventID\": \"92804421-41da-3df3-a364-7d11e931d562\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"0977f6e4-62a1-40ad-85b7-c25b99e61daf\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "90c1c8ad-bcf6-49e2-9abb-618071236ffc",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:28-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:19:28Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:28Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"dev-mermaid-api-django-GeneralWorkerQueueProcessingService2ABCF4FE-0QfAZtp1Qt3z\"]}, \"responseElements\": null, \"requestID\": \"f33b7985-05d3-4fbd-b865-d3491ec01430\", \"eventID\": \"90c1c8ad-bcf6-49e2-9abb-618071236ffc\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "d4662349-44bc-39db-8581-0cb4ba49328d",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:28-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:28Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"roleSessionName\": \"AutoScaling-RetrieveCurrentCapacity\", \"durationSeconds\": 900}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTY4NDI1OlI6UTNibGxLSVE=\"}, \"requestID\": \"a58bb76e-3859-4ac6-bb6e-9ad018295138\", \"eventID\": \"d4662349-44bc-39db-8581-0cb4ba49328d\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"7ebd8189-40f6-40c3-96aa-c79fda79ae37\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "34dd8362-f863-3484-9031-c16f0f29cc76",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:27-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:27Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTY3MDQ3OlI6aWJMTksxeTg=\"}, \"requestID\": \"5ade6514-38f8-4091-aea6-fc3856794046\", \"eventID\": \"34dd8362-f863-3484-9031-c16f0f29cc76\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"eff1975f-ed4e-44e8-aa4b-bb14f5ba414e\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "823fd188-9eee-3c23-aebc-5e8469b25f05",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:25-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:25Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTY1NjczOlI6Y0s3MlhJUXI=\"}, \"requestID\": \"840054af-f488-4b5d-a729-73c9b156346b\", \"eventID\": \"823fd188-9eee-3c23-aebc-5e8469b25f05\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"f4137e0d-8eb6-4704-99a9-d57db9d58b4e\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "09d40230-1874-4d37-b0da-9570e627c542",
"EventName": "DescribeServices",
"ReadOnly": "true",
"AccessKeyId": "[REDACTED]",
"EventTime": "2026-10-17 14:19:19-07:00",
"EventSource": "ecs.amazonaws.com",
"Username": "AutoScaling-RetrieveCurrentCapacity",
"Resources": [],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AssumedRole\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\", \"accountId\": \"554812291621\", \"accessKeyId\": \"[REDACTED]\", \"sessionContext\": {\"sessionIssuer\": {\"type\": \"Role\", \"principalId\": \"AROAYCLLDXIS7UE5UV6AJ\", \"arn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"accountId\": \"554812291621\", \"userName\": \"AWSServiceRoleForApplicationAutoScaling_ECSService\"}, \"attributes\": {\"creationDate\": \"2026-10-17T21:19:19Z\", \"mfaAuthenticated\": \"false\"}}, \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:19Z\", \"eventSource\": \"ecs.amazonaws.com\", \"eventName\": \"DescribeServices\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"cluster\": \"mermaid-api-infra-common-EC2MermaidApiCluster980EA2CE-73Jj7DadNqlS\", \"services\": [\"prod-mermaid-api-django-GeneralWorkerQueueProcessingService2ABCF4FE-kvrdfXw5IfXr\"]}, \"responseElements\": null, \"requestID\": \"56205893-91a0-4a6f-b40b-cce898882037\", \"eventID\": \"09d40230-1874-4d37-b0da-9570e627c542\", \"readOnly\": true, \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "2eca84c9-4aa1-3d99-87c8-57d2bc60cd9e",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:19-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:19Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTU5NDk3OlI6MTlUUm9tSWg=\"}, \"requestID\": \"07ee4824-2e2b-4bdd-8e90-d6e3f43cec74\", \"eventID\": \"2eca84c9-4aa1-3d99-87c8-57d2bc60cd9e\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"90fb1490-e659-4f5a-8a31-4726ffff5dd6\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "db99069f-a142-3a40-822d-396ec2079d17",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:19-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:19Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTU5NjkwOlI6NHR2ZWlmYzg=\"}, \"requestID\": \"9f9002ed-32fe-4527-b293-50365a15c952\", \"eventID\": \"db99069f-a142-3a40-822d-396ec2079d17\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"74b3eb92-ce1b-414a-a773-3bc438495a9a\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "ea7a6e53-aa3d-329c-a5a3-55bcfe2bcaa3",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:19-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:19Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTU5MTk0OlI6Q0VtOXBHeGc=\"}, \"requestID\": \"e9dc777f-eb3a-4c9f-8e60-af5f11cc0ade\", \"eventID\": \"ea7a6e53-aa3d-329c-a5a3-55bcfe2bcaa3\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"b0d4e59a-5fba-4be7-a2d3-0642d43ce0a4\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "fc2c548b-7c29-3073-8ddf-2b8fced41ad4",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:19-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AutoScaling-RetrieveCurrentCapacity"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"ecs.application-autoscaling.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:19Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"ecs.application-autoscaling.amazonaws.com\", \"userAgent\": \"ecs.application-autoscaling.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\", \"roleSessionName\": \"AutoScaling-RetrieveCurrentCapacity\", \"durationSeconds\": 900}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS7UE5UV6AJ:AutoScaling-RetrieveCurrentCapacity\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AWSServiceRoleForApplicationAutoScaling_ECSService/AutoScaling-RetrieveCurrentCapacity\"}, \"packedPolicySize\": 22, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTU5Mzk4OlI6d2pocGZyR3o=\"}, \"requestID\": \"a252f29f-bd98-4a1b-afb5-08e7894e0795\", \"eventID\": \"fc2c548b-7c29-3073-8ddf-2b8fced41ad4\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/aws-service-role/ecs.application-autoscaling.amazonaws.com/AWSServiceRoleForApplicationAutoScaling_ECSService\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"9a62a7cb-4216-4e50-9170-e49d6919109f\", \"eventCategory\": \"Management\"}"
},
{
"EventId": "997bdb67-ef02-320d-a565-0b641530caa2",
"EventName": "AssumeRole",
"ReadOnly": "true",
"EventTime": "2026-10-17 14:19:17-07:00",
"EventSource": "sts.amazonaws.com",
"Resources": [
{
"ResourceType": "AWS::IAM::AccessKey",
"ResourceName": "[REDACTED]"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::STS::AssumedRole",
"ResourceName": "AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection"
},
{
"ResourceType": "AWS::IAM::Role",
"ResourceName": "arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole"
}
],
"CloudTrailEvent": "{\"eventVersion\": \"1.11\", \"userIdentity\": {\"type\": \"AWSService\", \"invokedBy\": \"malware-protection-plan.guardduty.amazonaws.com\"}, \"eventTime\": \"2026-10-17T21:19:17Z\", \"eventSource\": \"sts.amazonaws.com\", \"eventName\": \"AssumeRole\", \"awsRegion\": \"us-east-1\", \"sourceIPAddress\": \"malware-protection-plan.guardduty.amazonaws.com\", \"userAgent\": \"malware-protection-plan.guardduty.amazonaws.com\", \"requestParameters\": {\"roleArn\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\", \"roleSessionName\": \"GuardDutyMalwareProtection\", \"policy\": \"{\\\"Version\\\": \\\"2012-10-17\\\", \\\"Statement\\\": [{\\\"Effect\\\": \\\"Allow\\\", \\\"Action\\\": [\\\"s3:GetObject\\\", \\\"s3:GetObjectVersion\\\", \\\"kms:Decrypt\\\"], \\\"Resource\\\": [\\\"*\\\"]}]}\", \"durationSeconds\": 3600}, \"responseElements\": {\"credentials\": \"[REDACTED]\", \"assumedRoleUser\": {\"assumedRoleId\": \"AROAYCLLDXIS73QSRDRBD:GuardDutyMalwareProtection\", \"arn\": \"arn:aws:sts::554812291621:assumed-role/AmazonGuardDutyAdminServiceRole/GuardDutyMalwareProtection\"}, \"packedPolicySize\": 25, \"sessionTokenUtilization\": \"[REDACTED]\", \"sessionTokenSize\": \"[REDACTED]\"}, \"additionalEventData\": {\"ExtendedRequestId\": \"MTp1cy1lYXN0LTE6UzoxNzkyMjcxOTU3ODg3OlI6cHJoTW1md0c=\"}, \"requestID\": \"8a6d0e76-30f6-4ab7-b69b-b4dfcb9915a0\", \"eventID\": \"997bdb67-ef02-320d-a565-0b641530caa2\", \"readOnly\": true, \"resources\": [{\"accountId\": \"554812291621\", \"type\": \"AWS::IAM::Role\", \"ARN\": \"arn:aws:iam::554812291621:role/AmazonGuardDutyAdminServiceRole\"}], \"eventType\": \"AwsApiCall\", \"managementEvent\": true, \"recipientAccountId\": \"554812291621\", \"sharedEventID\": \"4c5d57e3-774f-4841-9648-d476575e9817\", \"eventCategory\": \"Management\"}"
}
],
"NextToken": "N2JMh2Q+sMJGvqvPewxdELMdWVGe5Neb7y/aQby1v7PD/j6Miq5AfdhficQbV4eG"
}
}E017 · aws
{
"id": "E017",
"source": "aws",
"collected_at": "2026-10-18T18:40:49.303855+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "list_metrics",
"parameters": {
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount"
}
},
"result": {
"Metrics": [
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "AvailabilityZone",
"Value": "us-east-1a"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/dev-me-Targe-MYGE1DS5B433/8fef8dd04bad0a11"
},
{
"Name": "AvailabilityZone",
"Value": "us-east-1b"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/dev-me-Targe-MYGE1DS5B433/8fef8dd04bad0a11"
},
{
"Name": "AvailabilityZone",
"Value": "us-east-1a"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "AvailabilityZone",
"Value": "us-east-1c"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/dev-me-Targe-MYGE1DS5B433/8fef8dd04bad0a11"
},
{
"Name": "AvailabilityZone",
"Value": "us-east-1c"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "AvailabilityZone",
"Value": "us-east-1a"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "AvailabilityZone",
"Value": "us-east-1c"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "AvailabilityZone",
"Value": "us-east-1b"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "AvailabilityZone",
"Value": "us-east-1b"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
{
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/dev-me-Targe-MYGE1DS5B433/8fef8dd04bad0a11"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
}
]
}
}E018 · aws
{
"id": "E018",
"source": "aws",
"collected_at": "2026-10-18T18:41:08.310331+00:00",
"error": false,
"arguments": {
"service": "cloudwatch",
"operation": "get_metric_data",
"parameters": {
"StartTime": "2026-10-17T19:30:00Z",
"EndTime": "2026-10-17T23:30:00Z",
"MetricDataQueries": [
{
"Id": "req",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/ApplicationELB",
"MetricName": "RequestCount",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
"Period": 900,
"Stat": "Sum"
}
},
{
"Id": "latency",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/ApplicationELB",
"MetricName": "TargetResponseTime",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
"Period": 900,
"Stat": "p95"
}
},
{
"Id": "t5xx",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/ApplicationELB",
"MetricName": "HTTPCode_Target_5XX_Count",
"Dimensions": [
{
"Name": "TargetGroup",
"Value": "targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8"
},
{
"Name": "LoadBalancer",
"Value": "app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036"
}
]
},
"Period": 900,
"Stat": "Sum"
}
},
{
"Id": "cpu",
"ReturnData": true,
"MetricStat": {
"Metric": {
"Namespace": "AWS/RDS",
"MetricName": "CPUUtilization",
"Dimensions": [
{
"Name": "DBInstanceIdentifier",
"Value": "mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako"
}
]
},
"Period": 900,
"Stat": "Average"
}
}
]
}
},
"result": {
"MetricDataResults": [
{
"Id": "req",
"Label": "AWS/ApplicationELB app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036 targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8 RequestCount",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
759.0,
370.0,
278.0,
181.0
],
"StatusCode": "Complete"
},
{
"Id": "latency",
"Label": "AWS/ApplicationELB app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036 targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8 TargetResponseTime",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
1.3338220508207062,
0.7376694753043725,
0.6846428491978906,
1.6538428697988947
],
"StatusCode": "Complete"
},
{
"Id": "t5xx",
"Label": "AWS/ApplicationELB app/merma-Merma-7G2ZIRYPYQN4/8838074e02959036 targetgroup/prod-Targe-CSU397AXK7ZR/18376b322fd7b9c8 HTTPCode_Target_5XX_Count",
"Timestamps": [],
"Values": [],
"StatusCode": "Complete"
},
{
"Id": "cpu",
"Label": "AWS/RDS mermaid-api-infra-common-postgresrdsv2b4b63a33-576a8t2dqako CPUUtilization",
"Timestamps": [
"2026-10-17 14:05:00-07:00",
"2026-10-17 13:50:00-07:00",
"2026-10-17 13:35:00-07:00",
"2026-10-17 13:20:00-07:00"
],
"Values": [
91.765097620195,
90.33284355588418,
73.75484360604241,
12.379585238795993
],
"StatusCode": "Complete"
}
],
"Messages": []
}
}E019 · aws
{
"id": "E019",
"source": "aws",
"collected_at": "2026-10-18T18:41:09.145525+00:00",
"error": false,
"arguments": {
"service": "logs",
"operation": "filter_log_events",
"parameters": {
"logGroupName": "prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-A98SuFfhYcjE",
"startTime": 1792268100000,
"endTime": 1792270800000,
"limit": 40
}
},
"result": {
"events": [
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269181674,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269184881,
"eventId": "39968938347690864607276229361464093594210350110215045120"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269212844,
"message": "func:'update_summary_csv_cache' took: 31.1702 sec",
"ingestionTime": 1792269214829,
"eventId": "39968939042805092445475752719337073319167918246380568576"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269212847,
"message": "func:'update_summary_cache' took: 33.8618 sec",
"ingestionTime": 1792269214829,
"eventId": "39968939042871994681071344588761680473985863330898509825"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269300795,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269304829,
"eventId": "39968941004177933401442588749348402849638053081187745792"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269331791,
"message": "func:'update_summary_csv_cache' took: 30.9957 sec",
"ingestionTime": 1792269334831,
"eventId": "39968941695411831575097783680659962291228385152756613120"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269331793,
"message": "func:'update_summary_cache' took: 33.8360 sec",
"ingestionTime": 1792269334831,
"eventId": "39968941695456433065494844926943033727773681875768573953"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269459481,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269459834,
"eventId": "39968944542993985975473052774474864771902599697404461056"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269491237,
"message": "func:'update_summary_csv_cache' took: 31.7557 sec",
"ingestionTime": 1792269494826,
"eventId": "39968945251176450500011521299385787385154238688769146880"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269491240,
"message": "func:'update_summary_cache' took: 34.3097 sec",
"ingestionTime": 1792269494826,
"eventId": "39968945251243352735607113168810394539972183773287088129"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269539391,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269539829,
"eventId": "39968946325046534790055148111302262135379020884430290944"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269571278,
"message": "func:'update_summary_csv_cache' took: 31.8870 sec",
"ingestionTime": 1792269574828,
"eventId": "39968947036150396935601128267763086335331899901169303552"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269571280,
"message": "func:'update_summary_cache' took: 34.9258 sec",
"ingestionTime": 1792269574828,
"eventId": "39968947036194998425998189514046157771877196624181264385"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269614423,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269614833,
"eventId": "39968947998316048526204863757684580953373119727503409152"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269646574,
"message": "func:'update_summary_csv_cache' took: 32.1514 sec",
"ingestionTime": 1792269649824,
"eventId": "39968948715307307404162928423500842407230641041170366464"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269646578,
"message": "func:'update_summary_cache' took: 35.2070 sec",
"ingestionTime": 1792269649824,
"eventId": "39968948715396510384957050916066985280321234487194288129"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269647663,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269649824,
"eventId": "39968948739592818925362777024633239606144706721183039490"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269678767,
"message": "func:'update_summary_csv_cache' took: 31.1040 sec",
"ingestionTime": 1792269679832,
"eventId": "39968949433235197580459279255237819987114929498351468544"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269678770,
"message": "func:'update_summary_cache' took: 32.1598 sec",
"ingestionTime": 1792269679832,
"eventId": "39968949433302099816054871124662427141932874582869409793"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269696527,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269699821,
"eventId": "39968949829296432306363146273077031765561210471898284032"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269728547,
"message": "func:'update_summary_csv_cache' took: 32.0197 sec",
"ingestionTime": 1792269729829,
"eventId": "39968950543366293563313699301328255174565390226347655168"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269728549,
"message": "func:'update_summary_cache' took: 34.6988 sec",
"ingestionTime": 1792269729829,
"eventId": "39968950543410895053710760547611326611110686949359616001"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269776315,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269779843,
"eventId": "39968951608628290206724505586669744383601022739308150784"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269808601,
"message": "func:'update_summary_csv_cache' took: 32.2866 sec",
"ingestionTime": 1792269809826,
"eventId": "39968952328630149686484204370539376455301213867860623360"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269808611,
"message": "func:'update_summary_cache' took: 34.9627 sec",
"ingestionTime": 1792269809826,
"eventId": "39968952328853157138469510601954733638027697482920427521"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269845243,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269849833,
"eventId": "39968953145774055251043297571056616151197092341297184768"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269877286,
"message": "func:'update_summary_csv_cache' took: 32.0436 sec",
"ingestionTime": 1792269879828,
"eventId": "39968953860356833647560054931547167518054957257762013184"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269877289,
"message": "func:'update_summary_cache' took: 33.6037 sec",
"ingestionTime": 1792269879828,
"eventId": "39968953860423735883155646800971774672872902342279954433"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269900395,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269904828,
"eventId": "39968954375704754440404225139519617879318660831386927104"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269932376,
"message": "func:'update_summary_csv_cache' took: 31.9807 sec",
"ingestionTime": 1792269934829,
"eventId": "39968955088904886634612083865242299695212674456572133376"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269932380,
"message": "func:'update_summary_cache' took: 35.0135 sec",
"ingestionTime": 1792269934829,
"eventId": "39968955088994089615406206357808442568303267902596055041"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269965051,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269969830,
"eventId": "39968955817581735996600195057235266391653391456013254656"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269995777,
"message": "func:'update_summary_csv_cache' took: 30.7261 sec",
"ingestionTime": 1792269999828,
"eventId": "39968956502794432966652121740327316215329678242416885760"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269995787,
"message": "func:'update_summary_cache' took: 33.3163 sec",
"ingestionTime": 1792269999828,
"eventId": "39968956503017440418637427971742673398056161857476689921"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270027939,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792270029827,
"eventId": "39968957220031000041794023254665646803482264559485452288"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270059701,
"message": "func:'update_summary_csv_cache' took: 31.7621 sec",
"ingestionTime": 1792270059825,
"eventId": "39968957928347269037523675512388248090467684958025154560"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270059704,
"message": "func:'update_summary_cache' took: 33.8279 sec",
"ingestionTime": 1792270059825,
"eventId": "39968957928414171273119267381812855245285630042543095809"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270092539,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792270094833,
"eventId": "39968958660659139866872278276460188887719300915254263808"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270124413,
"message": "func:'update_summary_csv_cache' took: 31.8737 sec",
"ingestionTime": 1792270124826,
"eventId": "39968959371473092324837360326029077611899909319657390080"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270124416,
"message": "func:'update_summary_cache' took: 34.6266 sec",
"ingestionTime": 1792270124826,
"eventId": "39968959371539994560432952195453684766717854404175331329"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792270152179,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792270154848,
"eventId": "39968959990675583507238642510204112553279370643217186816"
}
],
"searchedLogStreams": [],
"nextToken": "Bxkq6kVGFtq2y_MoigeqscPOdhXVbhiVtLoAmXb5jCogB7ZQDJ1pOVbmZgZMN7lLhWvkK5kD6i_QaQlRQIXrgcKzLcvAEOySeSz0OJtGNx9HZMav4UqMt9i4Jpv4slXXbkDOrHXdlLJ5KHpHhi3UA7u9gyg_q1zBAr7l6ikFA8or-35sxy8QMrx9UN_OPtlBIlz_22pkGs-Ue5_Gxk7E1VBguRTmIVf4REBrDSfTpawdAh1hslPRIpyXIcI8Hr8Dvcah1nfJnqWhkhjXDxMaPO2-Gmr4B8LDKJHU-kHcnkcCxO79EoJ08-17H-u7wxns0MmguVnUTuQ9zle7puLB2zpSCIOmVVK9XZlNolQnjwQ"
}
}E020 · aws
{
"id": "E020",
"source": "aws",
"collected_at": "2026-10-18T18:41:09.445128+00:00",
"error": false,
"arguments": {
"service": "logs",
"operation": "filter_log_events",
"parameters": {
"logGroupName": "prod-mermaid-api-django-WorkerServiceQueueProcessingTaskDefQueueProcessingContainerLogGroup96DD846B-8pp9QK9qYuyw",
"startTime": 1792268100000,
"endTime": 1792270800000,
"limit": 40
}
},
"result": {
"events": [],
"searchedLogStreams": []
}
}E021 · search
{
"id": "E021",
"source": "search",
"collected_at": "2026-10-18T18:41:09.592238+00:00",
"error": false,
"arguments": {
"query": "SummaryCache",
"source": "data-mermaid/mermaid-api"
},
"result": {
"matches": [
{
"source": "data-mermaid/mermaid-api",
"path": "Dockerfile",
"line": 106,
"text": "# The scheduled tasks (ScheduledBackupTask, SummaryCacheTask) override CMD with a"
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/nag_suppressions.py",
"line": 503,
"text": " \"SummaryCacheTaskDef\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 232,
"text": " # API, ScheduledBackupTask, SummaryCacheTask, QueueWorker General,"
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 282,
"text": " \"SummaryCacheTaskDef\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 286,
"text": " \"SummaryCacheUpdateContainer\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 296,
"text": " logging=ecs.LogDrivers.aws_logs(stream_prefix=\"SummaryCacheUpdateContainer\"),"
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 298,
"text": " add_adot_sidecar(summary_cache_task_def, \"SummaryCache\")"
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"line": 302,
"text": " id=\"SummaryCacheService\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/constructs/dashboard.py",
"line": 91,
"text": " \"SummaryCache\": summary_cache_service,"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/admin/__init__.py",
"line": 7,
"text": "from .summaries import SummaryCacheQueueAdmin # noqa: F401, F403"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/admin/summaries.py",
"line": 3,
"text": "from ..models import SummaryCacheQueue"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/admin/summaries.py",
"line": 6,
"text": "@admin.register(SummaryCacheQueue)"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/admin/summaries.py",
"line": 7,
"text": "class SummaryCacheQueueAdmin(admin.ModelAdmin):"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/migrations/0082_summarycachequeue.py",
"line": 13,
"text": " name=\"SummaryCacheQueue\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/migrations/0083_auto_20250131_1638.py",
"line": 26,
"text": " (\"api\", \"0082_summarycachequeue\"),"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/migrations/0125_unique_together_to_unique_constraints.py",
"line": 82,
"text": " name=\"summarycachequeue\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/migrations/0125_unique_together_to_unique_constraints.py",
"line": 144,
"text": " model_name=\"summarycachequeue\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/migrations/0125_unique_together_to_unique_constraints.py",
"line": 147,
"text": " name=\"unique_summarycachequeue_project_processing\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/models/__init__.py",
"line": 75,
"text": " SummaryCacheQueue,"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/models/summaries.py",
"line": 9,
"text": "class SummaryCacheQueue(models.Model):"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/models/summaries.py",
"line": 20,
"text": " name=\"unique_summarycachequeue_project_processing\","
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 7,
"text": "from api.models import SummaryCacheQueue"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 17,
"text": " SummaryCacheQueue.objects.create(project_id=uuid.uuid4())"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 30,
"text": " SummaryCacheQueue.objects.create(project_id=project_id)"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 36,
"text": " SummaryCacheQueue.objects.filter(project_id=project_id).delete()"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 51,
"text": " SummaryCacheQueue.objects.create(project_id=project_id)"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 66,
"text": " SummaryCacheQueue.objects.create(project_id=project_id)"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/tests/test_summary_cache_wait.py",
"line": 92,
"text": " patch(\"api.utils.reports.SummaryCacheQueue\") as mock_scq,"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/utils/reports.py",
"line": 7,
"text": "from ..models import SummaryCacheQueue"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/utils/reports.py",
"line": 92,
"text": " if SummaryCacheQueue.objects.filter(project_id__in=project_ids).exists():"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/utils/summary_cache.py",
"line": 65,
"text": " SummaryCacheQueue,"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/utils/summary_cache.py",
"line": 295,
"text": " INSERT INTO \"{SummaryCacheQueue._meta.db_table}\""
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/utils/summary_cache.py",
"line": 315,
"text": " \"\"\"Block until SummaryCacheQueue entries for project_ids are cleared, or timeout."
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/api/utils/summary_cache.py",
"line": 329,
"text": " SummaryCacheQueue.objects.filter(project_id__in=project_ids).values_list("
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/tools/management/commands/process_summaries.py",
"line": 9,
"text": "from api.models import SummaryCacheQueue"
},
{
"source": "data-mermaid/mermaid-api",
"path": "src/tools/management/commands/process_summaries.py",
"line": 45,
"text": " tasks = SummaryCacheQueue.objects.filter(attempts__lt=self.MAX_ATTEMPTS).order_by("
}
],
"truncated": false
}
}E022 · read
{
"id": "E022",
"source": "read",
"collected_at": "2026-10-18T18:41:22.351823+00:00",
"error": false,
"arguments": {
"source": "data-mermaid/mermaid-api",
"path": "src/tools/management/commands/process_summaries.py",
"start_line": 1,
"lines": 120
},
"result": {
"source": "data-mermaid/mermaid-api",
"path": "src/tools/management/commands/process_summaries.py",
"total_lines": 55,
"text": "1: import logging\n2: import os\n3: import signal\n4: import threading\n5: from concurrent.futures import ThreadPoolExecutor\n6: \n7: from django.core.management.base import BaseCommand\n8: \n9: from api.models import SummaryCacheQueue\n10: from api.utils.summary_cache import update_summary_cache\n11: \n12: logger = logging.getLogger(__name__)\n13: \n14: \n15: class Command(BaseCommand):\n16: WAIT_SECONDS = 5\n17: MAX_ATTEMPTS = 2\n18: stop_event = threading.Event()\n19: \n20: def _process_tasks(self, task):\n21: try:\n22: task.processing = True\n23: task.save()\n24: update_summary_cache(task.project_id)\n25: task.delete()\n26: return True\n27: except Exception:\n28: logger.exception(f\"Error update_summary_cache [Project id: {task.project_id}]\")\n29: task.processing = False\n30: task.attempts += 1\n31: task.save()\n32: return False\n33: \n34: def process_tasks(self, tasks):\n35: with ThreadPoolExecutor(max_workers=max(os.cpu_count(), 2)) as executor:\n36: executor.map(self._process_tasks, tasks)\n37: \n38: def handle(self, *args, **options):\n39: logger.info(\"Starting process_summaries\")\n40: \n41: signal.signal(signal.SIGINT, self.handle_stop_signal)\n42: signal.signal(signal.SIGTERM, self.handle_stop_signal)\n43: \n44: while not self.stop_event.is_set():\n45: tasks = SummaryCacheQueue.objects.filter(attempts__lt=self.MAX_ATTEMPTS).order_by(\n46: \"created_on\"\n47: )\n48: if not tasks.exists():\n49: self.stop_event.wait(self.WAIT_SECONDS)\n50: else:\n51: self.process_tasks(tasks)\n52: \n53: def handle_stop_signal(self, signum, frame):\n54: logger.info(\"Shutting down gracefully...\")\n55: self.stop_event.set()"
}
}E023 · read
{
"id": "E023",
"source": "read",
"collected_at": "2026-10-18T18:41:22.352402+00:00",
"error": false,
"arguments": {
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"start_line": 278,
"lines": 60
},
"result": {
"source": "data-mermaid/mermaid-api",
"path": "iac/stacks/api.py",
"total_lines": 594,
"text": "278: # --- Summary Cache Update Task ---\n279: \n280: summary_cache_task_def = ecs.Ec2TaskDefinition(\n281: self,\n282: \"SummaryCacheTaskDef\",\n283: network_mode=ecs.NetworkMode.AWS_VPC,\n284: )\n285: summary_cache_task_def.add_container(\n286: \"SummaryCacheUpdateContainer\",\n287: image=ecs.ContainerImage.from_docker_image_asset(image_asset),\n288: cpu=config.api.summary_cpu,\n289: memory_limit_mib=config.api.summary_memory,\n290: secrets=self.api_secrets,\n291: environment={\n292: **environment,\n293: \"OTEL_SERVICE_NAME\": f\"mermaid-summary-cache-{config.env_id}\",\n294: },\n295: command=[\"opentelemetry-instrument\", \"python\", \"manage.py\", \"process_summaries\"],\n296: logging=ecs.LogDrivers.aws_logs(stream_prefix=\"SummaryCacheUpdateContainer\"),\n297: )\n298: add_adot_sidecar(summary_cache_task_def, \"SummaryCache\")\n299: \n300: summary_cache_service = ecs.Ec2Service(\n301: self,\n302: id=\"SummaryCacheService\",\n303: task_definition=summary_cache_task_def,\n304: cluster=cluster,\n305: security_groups=[container_security_group],\n306: enable_execute_command=True,\n307: min_healthy_percent=0,\n308: capacity_provider_strategies=cluster.default_capacity_provider_strategy,\n309: circuit_breaker=ecs.DeploymentCircuitBreaker(enable=True, rollback=True),\n310: )\n311: \n312: # --- API Service ---\n313: \n314: task_definition = ecs.Ec2TaskDefinition(\n315: self, id=\"ApiTaskDefinition\", network_mode=ecs.NetworkMode.AWS_VPC\n316: )\n317: api_log_group = logs.LogGroup.from_log_group_name(\n318: self,\n319: \"ApiLogGroup\",\n320: f\"/mermaid/{config.env_id}/api\",\n321: )\n322: task_definition.add_container(\n323: id=\"MermaidAPI\",\n324: image=ecs.ContainerImage.from_docker_image_asset(image_asset),\n325: cpu=config.api.container_cpu,\n326: memory_limit_mib=config.api.container_memory,\n327: port_mappings=[ecs.PortMapping(container_port=8081)],\n328: # Run an init (tini) as PID 1 instead of the gunicorn master. Orphaned\n329: # processes (health-check wget, ECS Exec/SSM children, subprocesses of\n330: # an OOM-killed worker) are reparented to PID 1. gunicorn halts the\n331: # whole server if any reaped child exits with code 3 or 4, even if it\n332: # is not one of its workers (\"Reason: App failed to load.\").\n333: linux_parameters=ecs.LinuxParameters(\n334: self, \"ApiLinuxParameters\", init_process_enabled=True\n335: ),\n336: environment={**environment, \"OTEL_SERVICE_NAME\": f\"mermaid-api-{config.env_id}\"},\n337: secrets=self.api_secrets,"
}
}E024 · aws
{
"id": "E024",
"source": "aws",
"collected_at": "2026-10-18T18:41:22.757295+00:00",
"error": false,
"arguments": {
"service": "logs",
"operation": "filter_log_events",
"parameters": {
"logGroupName": "prod-mermaid-api-django-SummaryCacheTaskDefSummaryCacheUpdateContainerLogGroupD8B09ED2-A98SuFfhYcjE",
"startTime": 1792274400000,
"endTime": 1792276200000,
"limit": 20
}
},
"result": {
"events": [
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269181674,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269184881,
"eventId": "39968938347690864607276229361464093594210350110215045120"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269212844,
"message": "func:'update_summary_csv_cache' took: 31.1702 sec",
"ingestionTime": 1792269214829,
"eventId": "39968939042805092445475752719337073319167918246380568576"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269212847,
"message": "func:'update_summary_cache' took: 33.8618 sec",
"ingestionTime": 1792269214829,
"eventId": "39968939042871994681071344588761680473985863330898509825"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269300795,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269304829,
"eventId": "39968941004177933401442588749348402849638053081187745792"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269331791,
"message": "func:'update_summary_csv_cache' took: 30.9957 sec",
"ingestionTime": 1792269334831,
"eventId": "39968941695411831575097783680659962291228385152756613120"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269331793,
"message": "func:'update_summary_cache' took: 33.8360 sec",
"ingestionTime": 1792269334831,
"eventId": "39968941695456433065494844926943033727773681875768573953"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269459481,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269459834,
"eventId": "39968944542993985975473052774474864771902599697404461056"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269491237,
"message": "func:'update_summary_csv_cache' took: 31.7557 sec",
"ingestionTime": 1792269494826,
"eventId": "39968945251176450500011521299385787385154238688769146880"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269491240,
"message": "func:'update_summary_cache' took: 34.3097 sec",
"ingestionTime": 1792269494826,
"eventId": "39968945251243352735607113168810394539972183773287088129"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269539391,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269539829,
"eventId": "39968946325046534790055148111302262135379020884430290944"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269571278,
"message": "func:'update_summary_csv_cache' took: 31.8870 sec",
"ingestionTime": 1792269574828,
"eventId": "39968947036150396935601128267763086335331899901169303552"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269571280,
"message": "func:'update_summary_cache' took: 34.9258 sec",
"ingestionTime": 1792269574828,
"eventId": "39968947036194998425998189514046157771877196624181264385"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269614423,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269614833,
"eventId": "39968947998316048526204863757684580953373119727503409152"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269646574,
"message": "func:'update_summary_csv_cache' took: 32.1514 sec",
"ingestionTime": 1792269649824,
"eventId": "39968948715307307404162928423500842407230641041170366464"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269646578,
"message": "func:'update_summary_cache' took: 35.2070 sec",
"ingestionTime": 1792269649824,
"eventId": "39968948715396510384957050916066985280321234487194288129"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269647663,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269649824,
"eventId": "39968948739592818925362777024633239606144706721183039490"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269678767,
"message": "func:'update_summary_csv_cache' took: 31.1040 sec",
"ingestionTime": 1792269679832,
"eventId": "39968949433235197580459279255237819987114929498351468544"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269678770,
"message": "func:'update_summary_cache' took: 32.1598 sec",
"ingestionTime": 1792269679832,
"eventId": "39968949433302099816054871124662427141932874582869409793"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269696527,
"message": "---- RUNNING CACHE UPDATE ----",
"ingestionTime": 1792269699821,
"eventId": "39968949829296432306363146273077031765561210471898284032"
},
{
"logStreamName": "SummaryCacheUpdateContainer/SummaryCacheUpdateContainer/59f4c3f522d94b13a435192e6b60f173",
"timestamp": 1792269728547,
"message": "func:'update_summary_csv_cache' took: 32.0197 sec",
"ingestionTime": 1792269729829,
"eventId": "39968950543366293563313699301328255174565390226347655168"
}
],
"searchedLogStreams": [],
"nextToken": "Bxkq6kVGFtq2y_MoigeqscPOdhXVbhiVtLoAmXb5jCqu9zCQkSh0sAulbPcpBUk3fDKI34Pg9Hp77EOw0klmeRF2PelFYYZwpbJO5xMBELkLIlGGs8L9VbcGKh-gLIjKj8MxxL4zB3UX-uP0S0tXDcy8IgsghXXYq_n4lIjcq3yfAwTfNpVeI73sStuq5ULeUWuj4P2GOqaDSCoDLRSO97K-6ypjqSU2oUBZsPGiEntrtvxVBZ38cNT3RCdw0Yuu1TcFExXuwyeYDLhRZyAaP-waRblqFyIpUyI5qJQz_bv2boDvZs38ktyWnCc1Lp2QNw1dXeZX5rjO9U5-SMEdtjujLd1X_BRBqjxJ3t55G4U"
}
}